--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-05T20:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfb76386-5a65-42a5-a1b2-eb2f743d2f97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-6354d0/test-model-6354d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bfb76386-5a65-42a5-a1b2-eb2f743d2f97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfb76386-5a65-42a5-a1b2-eb2f743d2f97","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfb76386-5a65-42a5-a1b2-eb2f743d2f97","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfb76386-5a65-42a5-a1b2-eb2f743d2f97","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfb76386-5a65-42a5-a1b2-eb2f743d2f97","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:03:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d5790a1-4896-4eeb-bd0d-93d7a2606fba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43668","PortSpecifier":{"PortValue":43668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d5790a1-4896-4eeb-bd0d-93d7a2606fba","method":"POST","path":"/ai-tenant-e2e-inf-b-82d890/test-model-82d890/v1/chat/completions","host":"e2e-inf-b-82d890.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:03:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d5790a1-4896-4eeb-bd0d-93d7a2606fba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43668","PortSpecifier":{"PortValue":43668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783281790,"nanos":984605017},"http":{"id":"8d5790a1-4896-4eeb-bd0d-93d7a2606fba","method":"POST","headers":{":authority":"e2e-inf-b-82d890.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-82d890/test-model-82d890/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:03:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d5790a1-4896-4eeb-bd0d-93d7a2606fba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jFMWezi6OsZuARgL_D5cGRE8wEqrjXuDFX4tiepf4B0ovfShrnftHoTgFzni"}
{"level":"debug","ts":"2026-07-05T20:03:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d5790a1-4896-4eeb-bd0d-93d7a2606fba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-82d890.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jFMWezi6OsZuARgL_D5cGRE8wEqrjXuDFX4tiepf4B0ovfShrnftHoTgFzni\"}"}
{"level":"debug","ts":"2026-07-05T20:03:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d5790a1-4896-4eeb-bd0d-93d7a2606fba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-82d890.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-05T20:03:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"8d5790a1-4896-4eeb-bd0d-93d7a2606fba","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-82d890.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-05T20:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d5790a1-4896-4eeb-bd0d-93d7a2606fba","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"24028c5e794ddc1b1140ef0896a1dfea44349822d8bc9078c156dba1f2c0c903"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-82d890.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-82d890/test-model-82d890/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d5790a1-4896-4eeb-bd0d-93d7a2606fba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"8d5790a1-4896-4eeb-bd0d-93d7a2606fba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-05T20:03:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d5790a1-4896-4eeb-bd0d-93d7a2606fba","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-05T20:03:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d5790a1-4896-4eeb-bd0d-93d7a2606fba","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-05T20:03:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/639cd9a7d7aaa08d9b44bb5f2c0a9331a000d61b507980047a058b1f525a2dcc"}
{"level":"info","ts":"2026-07-05T20:03:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97b6187a2198e7da0d39d294a74ee12e2aba00748d6f8660f58c0e4150781526"}
{"level":"info","ts":"2026-07-05T20:03:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f3000baf4d7a6e7848e4845c9d606803742ca73a9df896607888db419217fc8"}
{"level":"info","ts":"2026-07-05T20:03:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc6c757e4693c7cdf30ec44e4de2df8d6913dab943f7513f9f50ea77a46520eb"}
{"level":"info","ts":"2026-07-05T20:03:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de8bfadd7fee8c0f59524b4c4bc97cdb34aab0f0906a35fcd6eb5025f7b1a9c"}
{"level":"info","ts":"2026-07-05T20:03:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24028c5e794ddc1b1140ef0896a1dfea44349822d8bc9078c156dba1f2c0c903"}
{"level":"info","ts":"2026-07-05T20:03:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffb3538d535d178f388ff54079b361f59f37092c259cb24394a459d0811c72ee"}
{"level":"info","ts":"2026-07-05T20:03:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02a56c6a99d432903fb85f394965985f2cf64c2e5080549c411a68a1357c054c"}
{"level":"info","ts":"2026-07-05T20:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3244dc5e981e2ea57c2bb8b65ce68afa8565bc300e5155b5fb7be878ca3c7a5a"}
{"level":"info","ts":"2026-07-05T20:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e7158920570c9af0b29b58d6b4a2434215591abb9c27e32d8742764d0f23516"}
{"level":"info","ts":"2026-07-05T20:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fa367707ac03cca657a15e62a48074355471069d1e3fe231f214e6e0594ef9c"}
{"level":"info","ts":"2026-07-05T20:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d49980064e363d09aae0d22d874d9fb61f0dc8295844fb2d1c3c280c9f7bf2ad"}
{"level":"info","ts":"2026-07-05T20:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8d0b25d49e85d5ccafa822a8ba46aa83356d0ba3af1edce0b430b9338995a2f"}
{"level":"info","ts":"2026-07-05T20:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8f83365ab0fcc83ef6c54b112fc9deaa82296d709955d76315a7701d9b7b57f"}
{"level":"info","ts":"2026-07-05T20:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64355fe414ed34b214b6362925e3670a9d4e9225c43262b6bf40f83bc15d98d8"}
{"level":"info","ts":"2026-07-05T20:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d85773f7f84e92237fe0b373f8c322067b439d775548e5759184a610bc94dc0"}
{"level":"info","ts":"2026-07-05T20:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcc9b0edfcf6583c35572b29a1b5915e4f913b9cd834411df82d360542ec9d60"}
{"level":"info","ts":"2026-07-05T20:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a94206b82baef826fb9f2aa67542737032ec28ea6e59bc5fbf8b6aed166ec3a"}
{"level":"info","ts":"2026-07-05T20:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b74863e0dd98ca3600265ce9302343c667f1b014dcb5026a62ecffbe8f244f4b"}
{"level":"info","ts":"2026-07-05T20:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a60f4e2478f2972bd9d36a0a7d82e69c7dd6757c7b76017c884d35912f9fdade"}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9c3dee6d1faa2b1eef33126136bfcf25a2bca6c31625c7b893768a5734e195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9c3dee6d1faa2b1eef33126136bfcf25a2bca6c31625c7b893768a5734e195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9c3dee6d1faa2b1eef33126136bfcf25a2bca6c31625c7b893768a5734e195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9c3dee6d1faa2b1eef33126136bfcf25a2bca6c31625c7b893768a5734e195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9c3dee6d1faa2b1eef33126136bfcf25a2bca6c31625c7b893768a5734e195"}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9c3dee6d1faa2b1eef33126136bfcf25a2bca6c31625c7b893768a5734e195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9c3dee6d1faa2b1eef33126136bfcf25a2bca6c31625c7b893768a5734e195"}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9c3dee6d1faa2b1eef33126136bfcf25a2bca6c31625c7b893768a5734e195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a9c3dee6d1faa2b1eef33126136bfcf25a2bca6c31625c7b893768a5734e195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9c3dee6d1faa2b1eef33126136bfcf25a2bca6c31625c7b893768a5734e195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9c3dee6d1faa2b1eef33126136bfcf25a2bca6c31625c7b893768a5734e195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9c3dee6d1faa2b1eef33126136bfcf25a2bca6c31625c7b893768a5734e195"}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de"}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de"}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de"}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de"}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de"}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de"}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de"}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de"}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de"}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de"}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de"}
{"level":"debug","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dccc1e8a8127be81e833113528177ce7dd27eb5904ad664862a1825ce64bdc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:04:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:04:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dccc1e8a8127be81e833113528177ce7dd27eb5904ad664862a1825ce64bdc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dccc1e8a8127be81e833113528177ce7dd27eb5904ad664862a1825ce64bdc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dccc1e8a8127be81e833113528177ce7dd27eb5904ad664862a1825ce64bdc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dccc1e8a8127be81e833113528177ce7dd27eb5904ad664862a1825ce64bdc0"}
{"level":"debug","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dccc1e8a8127be81e833113528177ce7dd27eb5904ad664862a1825ce64bdc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dccc1e8a8127be81e833113528177ce7dd27eb5904ad664862a1825ce64bdc0"}
{"level":"debug","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dccc1e8a8127be81e833113528177ce7dd27eb5904ad664862a1825ce64bdc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:04:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:04:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dccc1e8a8127be81e833113528177ce7dd27eb5904ad664862a1825ce64bdc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dccc1e8a8127be81e833113528177ce7dd27eb5904ad664862a1825ce64bdc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dccc1e8a8127be81e833113528177ce7dd27eb5904ad664862a1825ce64bdc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dccc1e8a8127be81e833113528177ce7dd27eb5904ad664862a1825ce64bdc0"}
{"level":"debug","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:04:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:04:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881"}
{"level":"debug","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881"}
{"level":"debug","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:04:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:04:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:04:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:04:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881"}
{"level":"debug","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881"}
{"level":"debug","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:04:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:04:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881"}
{"level":"info","ts":"2026-07-05T20:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a9c3dee6d1faa2b1eef33126136bfcf25a2bca6c31625c7b893768a5734e195"}
{"level":"info","ts":"2026-07-05T20:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce254c272054f46b751a329ffe83942967b435fd3e0d3364339c09d7d02065de"}
{"level":"info","ts":"2026-07-05T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2dccc1e8a8127be81e833113528177ce7dd27eb5904ad664862a1825ce64bdc0"}
{"level":"info","ts":"2026-07-05T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36eaa2f1b5d93cd4ad79d24cb29bbbe4e98c4955aac0c43a45cc3b666e3bd881"}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d677cdb66ea1f051bd6e8f709f048480b1b42e74019ae567a555e3741555132e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d677cdb66ea1f051bd6e8f709f048480b1b42e74019ae567a555e3741555132e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d677cdb66ea1f051bd6e8f709f048480b1b42e74019ae567a555e3741555132e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d677cdb66ea1f051bd6e8f709f048480b1b42e74019ae567a555e3741555132e"}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d677cdb66ea1f051bd6e8f709f048480b1b42e74019ae567a555e3741555132e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d677cdb66ea1f051bd6e8f709f048480b1b42e74019ae567a555e3741555132e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d677cdb66ea1f051bd6e8f709f048480b1b42e74019ae567a555e3741555132e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d677cdb66ea1f051bd6e8f709f048480b1b42e74019ae567a555e3741555132e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d677cdb66ea1f051bd6e8f709f048480b1b42e74019ae567a555e3741555132e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d677cdb66ea1f051bd6e8f709f048480b1b42e74019ae567a555e3741555132e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d677cdb66ea1f051bd6e8f709f048480b1b42e74019ae567a555e3741555132e"}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d677cdb66ea1f051bd6e8f709f048480b1b42e74019ae567a555e3741555132e"}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d677cdb66ea1f051bd6e8f709f048480b1b42e74019ae567a555e3741555132e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d677cdb66ea1f051bd6e8f709f048480b1b42e74019ae567a555e3741555132e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d677cdb66ea1f051bd6e8f709f048480b1b42e74019ae567a555e3741555132e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d677cdb66ea1f051bd6e8f709f048480b1b42e74019ae567a555e3741555132e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d677cdb66ea1f051bd6e8f709f048480b1b42e74019ae567a555e3741555132e"}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b"}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b"}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b5b81e1cc148a85c56797d620a56d4e4bee022967c24cf023fb16a673d1d473","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b"}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b5b81e1cc148a85c56797d620a56d4e4bee022967c24cf023fb16a673d1d473","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b5b81e1cc148a85c56797d620a56d4e4bee022967c24cf023fb16a673d1d473","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b5b81e1cc148a85c56797d620a56d4e4bee022967c24cf023fb16a673d1d473"}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b5b81e1cc148a85c56797d620a56d4e4bee022967c24cf023fb16a673d1d473","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b5b81e1cc148a85c56797d620a56d4e4bee022967c24cf023fb16a673d1d473","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1b5b81e1cc148a85c56797d620a56d4e4bee022967c24cf023fb16a673d1d473","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1b5b81e1cc148a85c56797d620a56d4e4bee022967c24cf023fb16a673d1d473\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b5b81e1cc148a85c56797d620a56d4e4bee022967c24cf023fb16a673d1d473","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b5b81e1cc148a85c56797d620a56d4e4bee022967c24cf023fb16a673d1d473","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b5b81e1cc148a85c56797d620a56d4e4bee022967c24cf023fb16a673d1d473"}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b5b81e1cc148a85c56797d620a56d4e4bee022967c24cf023fb16a673d1d473"}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6"}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b5b81e1cc148a85c56797d620a56d4e4bee022967c24cf023fb16a673d1d473","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b5b81e1cc148a85c56797d620a56d4e4bee022967c24cf023fb16a673d1d473"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b5b81e1cc148a85c56797d620a56d4e4bee022967c24cf023fb16a673d1d473","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b5b81e1cc148a85c56797d620a56d4e4bee022967c24cf023fb16a673d1d473","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6"}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b5b81e1cc148a85c56797d620a56d4e4bee022967c24cf023fb16a673d1d473"}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6"}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886"}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886"}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886"}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886"}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"967e5651d0f5be2da8bde9dfc076b8ea7371425c52e2017eae5bc539f8323b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"967e5651d0f5be2da8bde9dfc076b8ea7371425c52e2017eae5bc539f8323b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e50fda720c4a63f8f870eef6a727573b8173ba88190a532f4a921abf2bde9c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/967e5651d0f5be2da8bde9dfc076b8ea7371425c52e2017eae5bc539f8323b45"}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e50fda720c4a63f8f870eef6a727573b8173ba88190a532f4a921abf2bde9c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"967e5651d0f5be2da8bde9dfc076b8ea7371425c52e2017eae5bc539f8323b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["967e5651d0f5be2da8bde9dfc076b8ea7371425c52e2017eae5bc539f8323b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"967e5651d0f5be2da8bde9dfc076b8ea7371425c52e2017eae5bc539f8323b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e50fda720c4a63f8f870eef6a727573b8173ba88190a532f4a921abf2bde9c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e50fda720c4a63f8f870eef6a727573b8173ba88190a532f4a921abf2bde9c8"}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e50fda720c4a63f8f870eef6a727573b8173ba88190a532f4a921abf2bde9c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"967e5651d0f5be2da8bde9dfc076b8ea7371425c52e2017eae5bc539f8323b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"967e5651d0f5be2da8bde9dfc076b8ea7371425c52e2017eae5bc539f8323b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e50fda720c4a63f8f870eef6a727573b8173ba88190a532f4a921abf2bde9c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e50fda720c4a63f8f870eef6a727573b8173ba88190a532f4a921abf2bde9c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/967e5651d0f5be2da8bde9dfc076b8ea7371425c52e2017eae5bc539f8323b45"}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e50fda720c4a63f8f870eef6a727573b8173ba88190a532f4a921abf2bde9c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"967e5651d0f5be2da8bde9dfc076b8ea7371425c52e2017eae5bc539f8323b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["967e5651d0f5be2da8bde9dfc076b8ea7371425c52e2017eae5bc539f8323b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"967e5651d0f5be2da8bde9dfc076b8ea7371425c52e2017eae5bc539f8323b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e50fda720c4a63f8f870eef6a727573b8173ba88190a532f4a921abf2bde9c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e50fda720c4a63f8f870eef6a727573b8173ba88190a532f4a921abf2bde9c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"967e5651d0f5be2da8bde9dfc076b8ea7371425c52e2017eae5bc539f8323b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e50fda720c4a63f8f870eef6a727573b8173ba88190a532f4a921abf2bde9c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e50fda720c4a63f8f870eef6a727573b8173ba88190a532f4a921abf2bde9c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e50fda720c4a63f8f870eef6a727573b8173ba88190a532f4a921abf2bde9c8"}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e50fda720c4a63f8f870eef6a727573b8173ba88190a532f4a921abf2bde9c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e50fda720c4a63f8f870eef6a727573b8173ba88190a532f4a921abf2bde9c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e50fda720c4a63f8f870eef6a727573b8173ba88190a532f4a921abf2bde9c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e50fda720c4a63f8f870eef6a727573b8173ba88190a532f4a921abf2bde9c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886"}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/967e5651d0f5be2da8bde9dfc076b8ea7371425c52e2017eae5bc539f8323b45"}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e50fda720c4a63f8f870eef6a727573b8173ba88190a532f4a921abf2bde9c8"}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef90f99d12c2d77c1c2f0d7f4b302dff02944601de0dbb9dfba901a120700826","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e"}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef90f99d12c2d77c1c2f0d7f4b302dff02944601de0dbb9dfba901a120700826","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef90f99d12c2d77c1c2f0d7f4b302dff02944601de0dbb9dfba901a120700826","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef90f99d12c2d77c1c2f0d7f4b302dff02944601de0dbb9dfba901a120700826"}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef90f99d12c2d77c1c2f0d7f4b302dff02944601de0dbb9dfba901a120700826","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef90f99d12c2d77c1c2f0d7f4b302dff02944601de0dbb9dfba901a120700826","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef90f99d12c2d77c1c2f0d7f4b302dff02944601de0dbb9dfba901a120700826"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e"}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef90f99d12c2d77c1c2f0d7f4b302dff02944601de0dbb9dfba901a120700826","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef90f99d12c2d77c1c2f0d7f4b302dff02944601de0dbb9dfba901a120700826","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef90f99d12c2d77c1c2f0d7f4b302dff02944601de0dbb9dfba901a120700826"}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef90f99d12c2d77c1c2f0d7f4b302dff02944601de0dbb9dfba901a120700826","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef90f99d12c2d77c1c2f0d7f4b302dff02944601de0dbb9dfba901a120700826","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef90f99d12c2d77c1c2f0d7f4b302dff02944601de0dbb9dfba901a120700826"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e"}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef90f99d12c2d77c1c2f0d7f4b302dff02944601de0dbb9dfba901a120700826","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5df1f6708c5445512f6f5c07a0c29a53f4433b7ab08be1f259671646abf44da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5df1f6708c5445512f6f5c07a0c29a53f4433b7ab08be1f259671646abf44da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef90f99d12c2d77c1c2f0d7f4b302dff02944601de0dbb9dfba901a120700826"}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef90f99d12c2d77c1c2f0d7f4b302dff02944601de0dbb9dfba901a120700826","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5df1f6708c5445512f6f5c07a0c29a53f4433b7ab08be1f259671646abf44da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5df1f6708c5445512f6f5c07a0c29a53f4433b7ab08be1f259671646abf44da"}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5df1f6708c5445512f6f5c07a0c29a53f4433b7ab08be1f259671646abf44da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5df1f6708c5445512f6f5c07a0c29a53f4433b7ab08be1f259671646abf44da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5df1f6708c5445512f6f5c07a0c29a53f4433b7ab08be1f259671646abf44da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e"}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5df1f6708c5445512f6f5c07a0c29a53f4433b7ab08be1f259671646abf44da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5df1f6708c5445512f6f5c07a0c29a53f4433b7ab08be1f259671646abf44da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef90f99d12c2d77c1c2f0d7f4b302dff02944601de0dbb9dfba901a120700826"}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5df1f6708c5445512f6f5c07a0c29a53f4433b7ab08be1f259671646abf44da"}
{"level":"info","ts":"2026-07-05T20:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e"}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b"}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b"}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b"}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3"}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b"}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3"}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3"}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b"}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b"}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b"}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b"}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c842a5982fa26c16431a060d769fa197527f901b26361e01b6bd724ecef49eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c842a5982fa26c16431a060d769fa197527f901b26361e01b6bd724ecef49eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c842a5982fa26c16431a060d769fa197527f901b26361e01b6bd724ecef49eaa"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c842a5982fa26c16431a060d769fa197527f901b26361e01b6bd724ecef49eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c842a5982fa26c16431a060d769fa197527f901b26361e01b6bd724ecef49eaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c842a5982fa26c16431a060d769fa197527f901b26361e01b6bd724ecef49eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c842a5982fa26c16431a060d769fa197527f901b26361e01b6bd724ecef49eaa"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c842a5982fa26c16431a060d769fa197527f901b26361e01b6bd724ecef49eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b"}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf720433842efd843bb7054612bad89fa75794685e7ca7ffa0b6232039b05e4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf720433842efd843bb7054612bad89fa75794685e7ca7ffa0b6232039b05e4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf720433842efd843bb7054612bad89fa75794685e7ca7ffa0b6232039b05e4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf720433842efd843bb7054612bad89fa75794685e7ca7ffa0b6232039b05e4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c842a5982fa26c16431a060d769fa197527f901b26361e01b6bd724ecef49eaa"}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf720433842efd843bb7054612bad89fa75794685e7ca7ffa0b6232039b05e4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614"}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf720433842efd843bb7054612bad89fa75794685e7ca7ffa0b6232039b05e4c"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf720433842efd843bb7054612bad89fa75794685e7ca7ffa0b6232039b05e4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf720433842efd843bb7054612bad89fa75794685e7ca7ffa0b6232039b05e4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf720433842efd843bb7054612bad89fa75794685e7ca7ffa0b6232039b05e4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf720433842efd843bb7054612bad89fa75794685e7ca7ffa0b6232039b05e4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c81954b73dc629f1eba0195f8f7c5212861d52c4c710efc32bfb80973b3f84ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c81954b73dc629f1eba0195f8f7c5212861d52c4c710efc32bfb80973b3f84ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c81954b73dc629f1eba0195f8f7c5212861d52c4c710efc32bfb80973b3f84ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf720433842efd843bb7054612bad89fa75794685e7ca7ffa0b6232039b05e4c"}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c81954b73dc629f1eba0195f8f7c5212861d52c4c710efc32bfb80973b3f84ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c81954b73dc629f1eba0195f8f7c5212861d52c4c710efc32bfb80973b3f84ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c81954b73dc629f1eba0195f8f7c5212861d52c4c710efc32bfb80973b3f84ae"}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c81954b73dc629f1eba0195f8f7c5212861d52c4c710efc32bfb80973b3f84ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c81954b73dc629f1eba0195f8f7c5212861d52c4c710efc32bfb80973b3f84ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c81954b73dc629f1eba0195f8f7c5212861d52c4c710efc32bfb80973b3f84ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c81954b73dc629f1eba0195f8f7c5212861d52c4c710efc32bfb80973b3f84ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c81954b73dc629f1eba0195f8f7c5212861d52c4c710efc32bfb80973b3f84ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c81954b73dc629f1eba0195f8f7c5212861d52c4c710efc32bfb80973b3f84ae"}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca"}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca"}
{"level":"info","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca"}
{"level":"info","ts":"2026-07-05T20:06:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:06:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:06:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:06:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca"}
{"level":"error","ts":"2026-07-05T20:06:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:06:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:06:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49dc7af4-4315-4c0f-90b3-a327a50d992c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34870","PortSpecifier":{"PortValue":34870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"49dc7af4-4315-4c0f-90b3-a327a50d992c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49dc7af4-4315-4c0f-90b3-a327a50d992c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34870","PortSpecifier":{"PortValue":34870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783281978,"nanos":110921908},"http":{"id":"49dc7af4-4315-4c0f-90b3-a327a50d992c","method":"POST","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"49dc7af4-4315-4c0f-90b3-a327a50d992c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"49dc7af4-4315-4c0f-90b3-a327a50d992c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"49dc7af4-4315-4c0f-90b3-a327a50d992c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49dc7af4-4315-4c0f-90b3-a327a50d992c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49dc7af4-4315-4c0f-90b3-a327a50d992c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49dc7af4-4315-4c0f-90b3-a327a50d992c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/auth-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"49dc7af4-4315-4c0f-90b3-a327a50d992c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49dc7af4-4315-4c0f-90b3-a327a50d992c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49dc7af4-4315-4c0f-90b3-a327a50d992c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49dc7af4-4315-4c0f-90b3-a327a50d992c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49dc7af4-4315-4c0f-90b3-a327a50d992c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e6f845e-817e-402d-8e07-4631178c56b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39676","PortSpecifier":{"PortValue":39676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e6f845e-817e-402d-8e07-4631178c56b5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e6f845e-817e-402d-8e07-4631178c56b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39676","PortSpecifier":{"PortValue":39676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783281978,"nanos":171434979},"http":{"id":"4e6f845e-817e-402d-8e07-4631178c56b5","method":"POST","headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e6f845e-817e-402d-8e07-4631178c56b5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e6f845e-817e-402d-8e07-4631178c56b5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e6f845e-817e-402d-8e07-4631178c56b5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e6f845e-817e-402d-8e07-4631178c56b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e6f845e-817e-402d-8e07-4631178c56b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e6f845e-817e-402d-8e07-4631178c56b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c11b28/auth-test-model-c11b28\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e6f845e-817e-402d-8e07-4631178c56b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e6f845e-817e-402d-8e07-4631178c56b5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e6f845e-817e-402d-8e07-4631178c56b5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e6f845e-817e-402d-8e07-4631178c56b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e6f845e-817e-402d-8e07-4631178c56b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"734a2fb3-e034-40ad-9767-f34245e39d08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34886","PortSpecifier":{"PortValue":34886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"734a2fb3-e034-40ad-9767-f34245e39d08","method":"GET","path":"/maas-api/v1/api-keys/1b6a98aa-3179-4e6f-a3a0-9513de3f2c0f","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"734a2fb3-e034-40ad-9767-f34245e39d08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34886","PortSpecifier":{"PortValue":34886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783281978,"nanos":251621355},"http":{"id":"734a2fb3-e034-40ad-9767-f34245e39d08","method":"GET","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1b6a98aa-3179-4e6f-a3a0-9513de3f2c0f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"734a2fb3-e034-40ad-9767-f34245e39d08","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"734a2fb3-e034-40ad-9767-f34245e39d08","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"734a2fb3-e034-40ad-9767-f34245e39d08","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1b6a98aa-3179-4e6f-a3a0-9513de3f2c0f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"734a2fb3-e034-40ad-9767-f34245e39d08","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"734a2fb3-e034-40ad-9767-f34245e39d08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"734a2fb3-e034-40ad-9767-f34245e39d08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/auth-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"734a2fb3-e034-40ad-9767-f34245e39d08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"734a2fb3-e034-40ad-9767-f34245e39d08","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"734a2fb3-e034-40ad-9767-f34245e39d08","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"734a2fb3-e034-40ad-9767-f34245e39d08","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"734a2fb3-e034-40ad-9767-f34245e39d08","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1af7488-4691-4928-8786-e79a92990541","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39680","PortSpecifier":{"PortValue":39680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1af7488-4691-4928-8786-e79a92990541","method":"GET","path":"/maas-api/v1/api-keys/1f7727b0-bbe2-43db-9ba9-79b35e760534","host":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1af7488-4691-4928-8786-e79a92990541","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39680","PortSpecifier":{"PortValue":39680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783281978,"nanos":284656115},"http":{"id":"d1af7488-4691-4928-8786-e79a92990541","method":"GET","headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1f7727b0-bbe2-43db-9ba9-79b35e760534",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d1af7488-4691-4928-8786-e79a92990541","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1af7488-4691-4928-8786-e79a92990541","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1af7488-4691-4928-8786-e79a92990541","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1f7727b0-bbe2-43db-9ba9-79b35e760534",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1af7488-4691-4928-8786-e79a92990541","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1af7488-4691-4928-8786-e79a92990541","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1af7488-4691-4928-8786-e79a92990541","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c11b28/auth-test-model-c11b28\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d1af7488-4691-4928-8786-e79a92990541","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1af7488-4691-4928-8786-e79a92990541","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1af7488-4691-4928-8786-e79a92990541","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1af7488-4691-4928-8786-e79a92990541","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1af7488-4691-4928-8786-e79a92990541","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dec35dd-02ec-49a9-bbd6-04f42c58bc02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37658","PortSpecifier":{"PortValue":37658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2dec35dd-02ec-49a9-bbd6-04f42c58bc02","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dec35dd-02ec-49a9-bbd6-04f42c58bc02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37658","PortSpecifier":{"PortValue":37658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783281993,"nanos":165609142},"http":{"id":"2dec35dd-02ec-49a9-bbd6-04f42c58bc02","method":"POST","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2dec35dd-02ec-49a9-bbd6-04f42c58bc02","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2dec35dd-02ec-49a9-bbd6-04f42c58bc02","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2dec35dd-02ec-49a9-bbd6-04f42c58bc02","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dec35dd-02ec-49a9-bbd6-04f42c58bc02","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dec35dd-02ec-49a9-bbd6-04f42c58bc02","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dec35dd-02ec-49a9-bbd6-04f42c58bc02","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/auth-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2dec35dd-02ec-49a9-bbd6-04f42c58bc02","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dec35dd-02ec-49a9-bbd6-04f42c58bc02","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dec35dd-02ec-49a9-bbd6-04f42c58bc02","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dec35dd-02ec-49a9-bbd6-04f42c58bc02","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dec35dd-02ec-49a9-bbd6-04f42c58bc02","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6277562e-1bae-4e38-a45c-38833f5c5c3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48930","PortSpecifier":{"PortValue":48930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6277562e-1bae-4e38-a45c-38833f5c5c3a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6277562e-1bae-4e38-a45c-38833f5c5c3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48930","PortSpecifier":{"PortValue":48930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783281993,"nanos":205032632},"http":{"id":"6277562e-1bae-4e38-a45c-38833f5c5c3a","method":"POST","headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6277562e-1bae-4e38-a45c-38833f5c5c3a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6277562e-1bae-4e38-a45c-38833f5c5c3a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6277562e-1bae-4e38-a45c-38833f5c5c3a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6277562e-1bae-4e38-a45c-38833f5c5c3a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6277562e-1bae-4e38-a45c-38833f5c5c3a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6277562e-1bae-4e38-a45c-38833f5c5c3a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c11b28/auth-test-model-c11b28\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6277562e-1bae-4e38-a45c-38833f5c5c3a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6277562e-1bae-4e38-a45c-38833f5c5c3a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6277562e-1bae-4e38-a45c-38833f5c5c3a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6277562e-1bae-4e38-a45c-38833f5c5c3a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6277562e-1bae-4e38-a45c-38833f5c5c3a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33fd0b53-51d9-4a7a-b465-4b8c337b3628","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37674","PortSpecifier":{"PortValue":37674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33fd0b53-51d9-4a7a-b465-4b8c337b3628","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33fd0b53-51d9-4a7a-b465-4b8c337b3628","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37674","PortSpecifier":{"PortValue":37674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783281993,"nanos":248740043},"http":{"id":"33fd0b53-51d9-4a7a-b465-4b8c337b3628","method":"GET","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33fd0b53-51d9-4a7a-b465-4b8c337b3628","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zqYxaQ5qUTOJI0Du_h8h4EgXsiYF0vM488yVnOXUoBtLPDKwZJdArdqStGZt"}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"33fd0b53-51d9-4a7a-b465-4b8c337b3628","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zqYxaQ5qUTOJI0Du_h8h4EgXsiYF0vM488yVnOXUoBtLPDKwZJdArdqStGZt\"}"}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"33fd0b53-51d9-4a7a-b465-4b8c337b3628","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"af664368-0525-46a7-837d-4c632d6f99e5","keyName":"e2e-auth-iso-a-49bba9","subscription":"e2e-auth-iso-a22ded","tenant":"e2e-shared-a-ec8ab7","userId":"af664368-0525-46a7-837d-4c632d6f99e5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33fd0b53-51d9-4a7a-b465-4b8c337b3628","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33fd0b53-51d9-4a7a-b465-4b8c337b3628","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33fd0b53-51d9-4a7a-b465-4b8c337b3628","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33fd0b53-51d9-4a7a-b465-4b8c337b3628","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/auth-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33fd0b53-51d9-4a7a-b465-4b8c337b3628","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33fd0b53-51d9-4a7a-b465-4b8c337b3628","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33fd0b53-51d9-4a7a-b465-4b8c337b3628","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a22ded"}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33fd0b53-51d9-4a7a-b465-4b8c337b3628","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33fd0b53-51d9-4a7a-b465-4b8c337b3628","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33fd0b53-51d9-4a7a-b465-4b8c337b3628","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad3a6276-e644-473c-9714-14f5e1a5ae22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59054","PortSpecifier":{"PortValue":59054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad3a6276-e644-473c-9714-14f5e1a5ae22","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad3a6276-e644-473c-9714-14f5e1a5ae22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59054","PortSpecifier":{"PortValue":59054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282012,"nanos":340837136},"http":{"id":"ad3a6276-e644-473c-9714-14f5e1a5ae22","method":"POST","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ad3a6276-e644-473c-9714-14f5e1a5ae22","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad3a6276-e644-473c-9714-14f5e1a5ae22","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad3a6276-e644-473c-9714-14f5e1a5ae22","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad3a6276-e644-473c-9714-14f5e1a5ae22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad3a6276-e644-473c-9714-14f5e1a5ae22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad3a6276-e644-473c-9714-14f5e1a5ae22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/auth-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad3a6276-e644-473c-9714-14f5e1a5ae22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad3a6276-e644-473c-9714-14f5e1a5ae22","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad3a6276-e644-473c-9714-14f5e1a5ae22","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad3a6276-e644-473c-9714-14f5e1a5ae22","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad3a6276-e644-473c-9714-14f5e1a5ae22","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f48e0ecd-70f7-4fbb-9800-2f32e3365bc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43222","PortSpecifier":{"PortValue":43222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f48e0ecd-70f7-4fbb-9800-2f32e3365bc7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f48e0ecd-70f7-4fbb-9800-2f32e3365bc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43222","PortSpecifier":{"PortValue":43222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282012,"nanos":372763054},"http":{"id":"f48e0ecd-70f7-4fbb-9800-2f32e3365bc7","method":"POST","headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f48e0ecd-70f7-4fbb-9800-2f32e3365bc7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f48e0ecd-70f7-4fbb-9800-2f32e3365bc7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f48e0ecd-70f7-4fbb-9800-2f32e3365bc7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f48e0ecd-70f7-4fbb-9800-2f32e3365bc7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f48e0ecd-70f7-4fbb-9800-2f32e3365bc7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f48e0ecd-70f7-4fbb-9800-2f32e3365bc7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c11b28/auth-test-model-c11b28\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f48e0ecd-70f7-4fbb-9800-2f32e3365bc7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f48e0ecd-70f7-4fbb-9800-2f32e3365bc7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f48e0ecd-70f7-4fbb-9800-2f32e3365bc7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f48e0ecd-70f7-4fbb-9800-2f32e3365bc7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f48e0ecd-70f7-4fbb-9800-2f32e3365bc7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bfd9229e-8cbc-4a03-8f06-784ffa3f8f6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43236","PortSpecifier":{"PortValue":43236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bfd9229e-8cbc-4a03-8f06-784ffa3f8f6d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bfd9229e-8cbc-4a03-8f06-784ffa3f8f6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43236","PortSpecifier":{"PortValue":43236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282012,"nanos":408122360},"http":{"id":"bfd9229e-8cbc-4a03-8f06-784ffa3f8f6d","method":"GET","headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bfd9229e-8cbc-4a03-8f06-784ffa3f8f6d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YwU6fwzdzQSQowsK_nLp9jz0kbtbntwY9GXnoKt5oblMxasPeixL8xf0Zwaj"}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bfd9229e-8cbc-4a03-8f06-784ffa3f8f6d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c11b28.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YwU6fwzdzQSQowsK_nLp9jz0kbtbntwY9GXnoKt5oblMxasPeixL8xf0Zwaj\"}"}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bfd9229e-8cbc-4a03-8f06-784ffa3f8f6d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c11b28.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bfd9229e-8cbc-4a03-8f06-784ffa3f8f6d","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfd9229e-8cbc-4a03-8f06-784ffa3f8f6d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"bfd9229e-8cbc-4a03-8f06-784ffa3f8f6d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfd9229e-8cbc-4a03-8f06-784ffa3f8f6d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-05T20:06:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfd9229e-8cbc-4a03-8f06-784ffa3f8f6d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57e9c4b3-73e1-4a66-bdea-20cab8099ec0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52734","PortSpecifier":{"PortValue":52734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57e9c4b3-73e1-4a66-bdea-20cab8099ec0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57e9c4b3-73e1-4a66-bdea-20cab8099ec0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52734","PortSpecifier":{"PortValue":52734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282027,"nanos":311388824},"http":{"id":"57e9c4b3-73e1-4a66-bdea-20cab8099ec0","method":"POST","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57e9c4b3-73e1-4a66-bdea-20cab8099ec0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57e9c4b3-73e1-4a66-bdea-20cab8099ec0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57e9c4b3-73e1-4a66-bdea-20cab8099ec0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57e9c4b3-73e1-4a66-bdea-20cab8099ec0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57e9c4b3-73e1-4a66-bdea-20cab8099ec0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57e9c4b3-73e1-4a66-bdea-20cab8099ec0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/auth-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57e9c4b3-73e1-4a66-bdea-20cab8099ec0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57e9c4b3-73e1-4a66-bdea-20cab8099ec0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57e9c4b3-73e1-4a66-bdea-20cab8099ec0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57e9c4b3-73e1-4a66-bdea-20cab8099ec0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57e9c4b3-73e1-4a66-bdea-20cab8099ec0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28c5f3f3-84fa-4031-a731-98006f36a89b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36492","PortSpecifier":{"PortValue":36492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28c5f3f3-84fa-4031-a731-98006f36a89b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28c5f3f3-84fa-4031-a731-98006f36a89b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36492","PortSpecifier":{"PortValue":36492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282027,"nanos":342740093},"http":{"id":"28c5f3f3-84fa-4031-a731-98006f36a89b","method":"POST","headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"28c5f3f3-84fa-4031-a731-98006f36a89b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28c5f3f3-84fa-4031-a731-98006f36a89b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28c5f3f3-84fa-4031-a731-98006f36a89b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28c5f3f3-84fa-4031-a731-98006f36a89b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28c5f3f3-84fa-4031-a731-98006f36a89b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28c5f3f3-84fa-4031-a731-98006f36a89b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c11b28/auth-test-model-c11b28\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"28c5f3f3-84fa-4031-a731-98006f36a89b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28c5f3f3-84fa-4031-a731-98006f36a89b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28c5f3f3-84fa-4031-a731-98006f36a89b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28c5f3f3-84fa-4031-a731-98006f36a89b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28c5f3f3-84fa-4031-a731-98006f36a89b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52746533-1302-45fc-86a1-593a76345501","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52750","PortSpecifier":{"PortValue":52750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52746533-1302-45fc-86a1-593a76345501","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52746533-1302-45fc-86a1-593a76345501","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52750","PortSpecifier":{"PortValue":52750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282027,"nanos":382081274},"http":{"id":"52746533-1302-45fc-86a1-593a76345501","method":"POST","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52746533-1302-45fc-86a1-593a76345501","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52746533-1302-45fc-86a1-593a76345501","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52746533-1302-45fc-86a1-593a76345501","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52746533-1302-45fc-86a1-593a76345501","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52746533-1302-45fc-86a1-593a76345501","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52746533-1302-45fc-86a1-593a76345501","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/auth-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52746533-1302-45fc-86a1-593a76345501","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52746533-1302-45fc-86a1-593a76345501","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52746533-1302-45fc-86a1-593a76345501","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52746533-1302-45fc-86a1-593a76345501","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52746533-1302-45fc-86a1-593a76345501","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"436aa128-ce2a-4510-9a02-07c38e32daed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36496","PortSpecifier":{"PortValue":36496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"436aa128-ce2a-4510-9a02-07c38e32daed","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"436aa128-ce2a-4510-9a02-07c38e32daed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36496","PortSpecifier":{"PortValue":36496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282027,"nanos":414999454},"http":{"id":"436aa128-ce2a-4510-9a02-07c38e32daed","method":"POST","headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"436aa128-ce2a-4510-9a02-07c38e32daed","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"436aa128-ce2a-4510-9a02-07c38e32daed","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"436aa128-ce2a-4510-9a02-07c38e32daed","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"436aa128-ce2a-4510-9a02-07c38e32daed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"436aa128-ce2a-4510-9a02-07c38e32daed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"436aa128-ce2a-4510-9a02-07c38e32daed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c11b28/auth-test-model-c11b28\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"436aa128-ce2a-4510-9a02-07c38e32daed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"436aa128-ce2a-4510-9a02-07c38e32daed","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"436aa128-ce2a-4510-9a02-07c38e32daed","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"436aa128-ce2a-4510-9a02-07c38e32daed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:07:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"436aa128-ce2a-4510-9a02-07c38e32daed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd22033f-13ff-4e24-a85e-243a5b452b48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32834","PortSpecifier":{"PortValue":32834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd22033f-13ff-4e24-a85e-243a5b452b48","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd22033f-13ff-4e24-a85e-243a5b452b48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32834","PortSpecifier":{"PortValue":32834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282044,"nanos":455091300},"http":{"id":"fd22033f-13ff-4e24-a85e-243a5b452b48","method":"POST","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd22033f-13ff-4e24-a85e-243a5b452b48","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd22033f-13ff-4e24-a85e-243a5b452b48","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd22033f-13ff-4e24-a85e-243a5b452b48","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd22033f-13ff-4e24-a85e-243a5b452b48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd22033f-13ff-4e24-a85e-243a5b452b48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd22033f-13ff-4e24-a85e-243a5b452b48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/auth-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd22033f-13ff-4e24-a85e-243a5b452b48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd22033f-13ff-4e24-a85e-243a5b452b48","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd22033f-13ff-4e24-a85e-243a5b452b48","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd22033f-13ff-4e24-a85e-243a5b452b48","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd22033f-13ff-4e24-a85e-243a5b452b48","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64837711-a92c-4793-8e7a-c648579b9009","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59704","PortSpecifier":{"PortValue":59704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"64837711-a92c-4793-8e7a-c648579b9009","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64837711-a92c-4793-8e7a-c648579b9009","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59704","PortSpecifier":{"PortValue":59704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282044,"nanos":489749913},"http":{"id":"64837711-a92c-4793-8e7a-c648579b9009","method":"POST","headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"64837711-a92c-4793-8e7a-c648579b9009","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"64837711-a92c-4793-8e7a-c648579b9009","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"64837711-a92c-4793-8e7a-c648579b9009","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64837711-a92c-4793-8e7a-c648579b9009","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64837711-a92c-4793-8e7a-c648579b9009","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64837711-a92c-4793-8e7a-c648579b9009","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c11b28/auth-test-model-c11b28\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"64837711-a92c-4793-8e7a-c648579b9009","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64837711-a92c-4793-8e7a-c648579b9009","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64837711-a92c-4793-8e7a-c648579b9009","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64837711-a92c-4793-8e7a-c648579b9009","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64837711-a92c-4793-8e7a-c648579b9009","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a00bb220-3ca6-45e7-bab5-bc1310d57874","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59720","PortSpecifier":{"PortValue":59720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a00bb220-3ca6-45e7-bab5-bc1310d57874","method":"GET","path":"/maas-api/v1/api-keys/a7388f1f-60c3-427d-824f-bcb64e5c17f7","host":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a00bb220-3ca6-45e7-bab5-bc1310d57874","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59720","PortSpecifier":{"PortValue":59720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282044,"nanos":523788970},"http":{"id":"a00bb220-3ca6-45e7-bab5-bc1310d57874","method":"GET","headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a7388f1f-60c3-427d-824f-bcb64e5c17f7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a00bb220-3ca6-45e7-bab5-bc1310d57874","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a00bb220-3ca6-45e7-bab5-bc1310d57874","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a00bb220-3ca6-45e7-bab5-bc1310d57874","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a7388f1f-60c3-427d-824f-bcb64e5c17f7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a00bb220-3ca6-45e7-bab5-bc1310d57874","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a00bb220-3ca6-45e7-bab5-bc1310d57874","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a00bb220-3ca6-45e7-bab5-bc1310d57874","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c11b28/auth-test-model-c11b28\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a00bb220-3ca6-45e7-bab5-bc1310d57874","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a00bb220-3ca6-45e7-bab5-bc1310d57874","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a00bb220-3ca6-45e7-bab5-bc1310d57874","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a00bb220-3ca6-45e7-bab5-bc1310d57874","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a00bb220-3ca6-45e7-bab5-bc1310d57874","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d6a3485-52c8-44e7-966e-e4490efc40bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32838","PortSpecifier":{"PortValue":32838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9d6a3485-52c8-44e7-966e-e4490efc40bc","method":"GET","path":"/maas-api/v1/api-keys/a7388f1f-60c3-427d-824f-bcb64e5c17f7","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d6a3485-52c8-44e7-966e-e4490efc40bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32838","PortSpecifier":{"PortValue":32838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282044,"nanos":556505607},"http":{"id":"9d6a3485-52c8-44e7-966e-e4490efc40bc","method":"GET","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a7388f1f-60c3-427d-824f-bcb64e5c17f7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9d6a3485-52c8-44e7-966e-e4490efc40bc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9d6a3485-52c8-44e7-966e-e4490efc40bc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9d6a3485-52c8-44e7-966e-e4490efc40bc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a7388f1f-60c3-427d-824f-bcb64e5c17f7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d6a3485-52c8-44e7-966e-e4490efc40bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d6a3485-52c8-44e7-966e-e4490efc40bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d6a3485-52c8-44e7-966e-e4490efc40bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/auth-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9d6a3485-52c8-44e7-966e-e4490efc40bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d6a3485-52c8-44e7-966e-e4490efc40bc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d6a3485-52c8-44e7-966e-e4490efc40bc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d6a3485-52c8-44e7-966e-e4490efc40bc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:07:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d6a3485-52c8-44e7-966e-e4490efc40bc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"059770e5-80a5-457e-9af2-e125ebf412e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46458","PortSpecifier":{"PortValue":46458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"059770e5-80a5-457e-9af2-e125ebf412e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"059770e5-80a5-457e-9af2-e125ebf412e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46458","PortSpecifier":{"PortValue":46458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282061,"nanos":541421074},"http":{"id":"059770e5-80a5-457e-9af2-e125ebf412e7","method":"POST","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"059770e5-80a5-457e-9af2-e125ebf412e7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"059770e5-80a5-457e-9af2-e125ebf412e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"059770e5-80a5-457e-9af2-e125ebf412e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"059770e5-80a5-457e-9af2-e125ebf412e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"059770e5-80a5-457e-9af2-e125ebf412e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"059770e5-80a5-457e-9af2-e125ebf412e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/auth-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"059770e5-80a5-457e-9af2-e125ebf412e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"059770e5-80a5-457e-9af2-e125ebf412e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"059770e5-80a5-457e-9af2-e125ebf412e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"059770e5-80a5-457e-9af2-e125ebf412e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"059770e5-80a5-457e-9af2-e125ebf412e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca16ee96-2244-4f16-8b14-b13060a1aede","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60210","PortSpecifier":{"PortValue":60210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca16ee96-2244-4f16-8b14-b13060a1aede","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca16ee96-2244-4f16-8b14-b13060a1aede","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60210","PortSpecifier":{"PortValue":60210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282061,"nanos":572723119},"http":{"id":"ca16ee96-2244-4f16-8b14-b13060a1aede","method":"POST","headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ca16ee96-2244-4f16-8b14-b13060a1aede","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca16ee96-2244-4f16-8b14-b13060a1aede","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca16ee96-2244-4f16-8b14-b13060a1aede","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca16ee96-2244-4f16-8b14-b13060a1aede","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca16ee96-2244-4f16-8b14-b13060a1aede","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca16ee96-2244-4f16-8b14-b13060a1aede","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c11b28/auth-test-model-c11b28\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ca16ee96-2244-4f16-8b14-b13060a1aede","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca16ee96-2244-4f16-8b14-b13060a1aede","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca16ee96-2244-4f16-8b14-b13060a1aede","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca16ee96-2244-4f16-8b14-b13060a1aede","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca16ee96-2244-4f16-8b14-b13060a1aede","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fa5ebcd-d19d-4214-bf6e-b902ee7f443e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46470","PortSpecifier":{"PortValue":46470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3fa5ebcd-d19d-4214-bf6e-b902ee7f443e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fa5ebcd-d19d-4214-bf6e-b902ee7f443e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46470","PortSpecifier":{"PortValue":46470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282061,"nanos":606739792},"http":{"id":"3fa5ebcd-d19d-4214-bf6e-b902ee7f443e","method":"POST","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3fa5ebcd-d19d-4214-bf6e-b902ee7f443e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HdmG4Gax7FIvPFU1_i6BNlLnsRReU9v4cKB1spAB97ieLOPHX3aCwpYvDUv8"}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3fa5ebcd-d19d-4214-bf6e-b902ee7f443e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HdmG4Gax7FIvPFU1_i6BNlLnsRReU9v4cKB1spAB97ieLOPHX3aCwpYvDUv8\"}"}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3fa5ebcd-d19d-4214-bf6e-b902ee7f443e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f242f142-ca05-467e-b747-b89795e7cec7","keyName":"e2e-auth-iso-a-84a9bf","subscription":"e2e-auth-iso-1b366b","tenant":"e2e-shared-a-ec8ab7","userId":"f242f142-ca05-467e-b747-b89795e7cec7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3fa5ebcd-d19d-4214-bf6e-b902ee7f443e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fa5ebcd-d19d-4214-bf6e-b902ee7f443e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fa5ebcd-d19d-4214-bf6e-b902ee7f443e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fa5ebcd-d19d-4214-bf6e-b902ee7f443e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/auth-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3fa5ebcd-d19d-4214-bf6e-b902ee7f443e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fa5ebcd-d19d-4214-bf6e-b902ee7f443e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fa5ebcd-d19d-4214-bf6e-b902ee7f443e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fa5ebcd-d19d-4214-bf6e-b902ee7f443e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-1b366b"}
{"level":"info","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fa5ebcd-d19d-4214-bf6e-b902ee7f443e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:07:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fa5ebcd-d19d-4214-bf6e-b902ee7f443e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c842a5982fa26c16431a060d769fa197527f901b26361e01b6bd724ecef49eaa"}
{"level":"info","ts":"2026-07-05T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d677cdb66ea1f051bd6e8f709f048480b1b42e74019ae567a555e3741555132e"}
{"level":"info","ts":"2026-07-05T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39db57fa935f3dfdf29648d190b43bcd0701719608ea60afdc6b9afc9b24a83e"}
{"level":"info","ts":"2026-07-05T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1ea3ae7ab51b7bcb75bbeae19d94e76f02655eeb49e2724183029e50dcb1e8b"}
{"level":"info","ts":"2026-07-05T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4215e0cb06b66cd11f43b87da22c77b52d379adaa8ecce768e270dbd3b442b3"}
{"level":"info","ts":"2026-07-05T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b5b81e1cc148a85c56797d620a56d4e4bee022967c24cf023fb16a673d1d473"}
{"level":"info","ts":"2026-07-05T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef90f99d12c2d77c1c2f0d7f4b302dff02944601de0dbb9dfba901a120700826"}
{"level":"info","ts":"2026-07-05T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/679c5519e7c35ac34b3d3b7cd6d31857b5b2b08c58b2833389c745285cc3a3ca"}
{"level":"info","ts":"2026-07-05T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf720433842efd843bb7054612bad89fa75794685e7ca7ffa0b6232039b05e4c"}
{"level":"info","ts":"2026-07-05T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c81954b73dc629f1eba0195f8f7c5212861d52c4c710efc32bfb80973b3f84ae"}
{"level":"info","ts":"2026-07-05T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5df1f6708c5445512f6f5c07a0c29a53f4433b7ab08be1f259671646abf44da"}
{"level":"info","ts":"2026-07-05T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/967e5651d0f5be2da8bde9dfc076b8ea7371425c52e2017eae5bc539f8323b45"}
{"level":"info","ts":"2026-07-05T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea231582295efabeb0dffb82d7408ecede3145fe19eed0e61cd0d3a72750d886"}
{"level":"info","ts":"2026-07-05T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/071f0bab81712598401b12c4f5585ba8d40fa5911a20ae540f86c9e02c538614"}
{"level":"info","ts":"2026-07-05T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e50fda720c4a63f8f870eef6a727573b8173ba88190a532f4a921abf2bde9c8"}
{"level":"info","ts":"2026-07-05T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04788f20bd2b50fbb5f6a69aecbcf06546fe156eb3b2bd46694f9a273664c53b"}
{"level":"debug","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb25ecbda007899dbcc283ad6ad2afc96e2b18ac297b7814a0f77ac13b6cc4b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb25ecbda007899dbcc283ad6ad2afc96e2b18ac297b7814a0f77ac13b6cc4b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb25ecbda007899dbcc283ad6ad2afc96e2b18ac297b7814a0f77ac13b6cc4b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb25ecbda007899dbcc283ad6ad2afc96e2b18ac297b7814a0f77ac13b6cc4b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb25ecbda007899dbcc283ad6ad2afc96e2b18ac297b7814a0f77ac13b6cc4b6"}
{"level":"debug","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb25ecbda007899dbcc283ad6ad2afc96e2b18ac297b7814a0f77ac13b6cc4b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb25ecbda007899dbcc283ad6ad2afc96e2b18ac297b7814a0f77ac13b6cc4b6"}
{"level":"debug","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb25ecbda007899dbcc283ad6ad2afc96e2b18ac297b7814a0f77ac13b6cc4b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb25ecbda007899dbcc283ad6ad2afc96e2b18ac297b7814a0f77ac13b6cc4b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb25ecbda007899dbcc283ad6ad2afc96e2b18ac297b7814a0f77ac13b6cc4b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb25ecbda007899dbcc283ad6ad2afc96e2b18ac297b7814a0f77ac13b6cc4b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb25ecbda007899dbcc283ad6ad2afc96e2b18ac297b7814a0f77ac13b6cc4b6"}
{"level":"debug","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c646011cdd33c9c97f46eae57c479788c922e01460fe62e0a18fd0fdbccc1a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c646011cdd33c9c97f46eae57c479788c922e01460fe62e0a18fd0fdbccc1a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c646011cdd33c9c97f46eae57c479788c922e01460fe62e0a18fd0fdbccc1a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c646011cdd33c9c97f46eae57c479788c922e01460fe62e0a18fd0fdbccc1a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c646011cdd33c9c97f46eae57c479788c922e01460fe62e0a18fd0fdbccc1a5"}
{"level":"debug","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c646011cdd33c9c97f46eae57c479788c922e01460fe62e0a18fd0fdbccc1a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c646011cdd33c9c97f46eae57c479788c922e01460fe62e0a18fd0fdbccc1a5"}
{"level":"debug","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c646011cdd33c9c97f46eae57c479788c922e01460fe62e0a18fd0fdbccc1a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c646011cdd33c9c97f46eae57c479788c922e01460fe62e0a18fd0fdbccc1a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c646011cdd33c9c97f46eae57c479788c922e01460fe62e0a18fd0fdbccc1a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c646011cdd33c9c97f46eae57c479788c922e01460fe62e0a18fd0fdbccc1a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c646011cdd33c9c97f46eae57c479788c922e01460fe62e0a18fd0fdbccc1a5"}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f"}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f"}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f"}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619"}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619"}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d705c18f8eb223427d651adb3bbfa836079b35e52d5f881d7f114634b20a321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d705c18f8eb223427d651adb3bbfa836079b35e52d5f881d7f114634b20a321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619"}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d705c18f8eb223427d651adb3bbfa836079b35e52d5f881d7f114634b20a321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d705c18f8eb223427d651adb3bbfa836079b35e52d5f881d7f114634b20a321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d705c18f8eb223427d651adb3bbfa836079b35e52d5f881d7f114634b20a321"}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d705c18f8eb223427d651adb3bbfa836079b35e52d5f881d7f114634b20a321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d705c18f8eb223427d651adb3bbfa836079b35e52d5f881d7f114634b20a321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d705c18f8eb223427d651adb3bbfa836079b35e52d5f881d7f114634b20a321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619"}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d705c18f8eb223427d651adb3bbfa836079b35e52d5f881d7f114634b20a321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d705c18f8eb223427d651adb3bbfa836079b35e52d5f881d7f114634b20a321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d705c18f8eb223427d651adb3bbfa836079b35e52d5f881d7f114634b20a321"}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d705c18f8eb223427d651adb3bbfa836079b35e52d5f881d7f114634b20a321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d705c18f8eb223427d651adb3bbfa836079b35e52d5f881d7f114634b20a321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d705c18f8eb223427d651adb3bbfa836079b35e52d5f881d7f114634b20a321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619"}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68607d89f9849fc57ed7b8a538e9d834d4f5182ad97ec3a4a392655d4088be65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d705c18f8eb223427d651adb3bbfa836079b35e52d5f881d7f114634b20a321"}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68607d89f9849fc57ed7b8a538e9d834d4f5182ad97ec3a4a392655d4088be65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d705c18f8eb223427d651adb3bbfa836079b35e52d5f881d7f114634b20a321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68607d89f9849fc57ed7b8a538e9d834d4f5182ad97ec3a4a392655d4088be65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68607d89f9849fc57ed7b8a538e9d834d4f5182ad97ec3a4a392655d4088be65"}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68607d89f9849fc57ed7b8a538e9d834d4f5182ad97ec3a4a392655d4088be65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68607d89f9849fc57ed7b8a538e9d834d4f5182ad97ec3a4a392655d4088be65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68607d89f9849fc57ed7b8a538e9d834d4f5182ad97ec3a4a392655d4088be65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619"}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68607d89f9849fc57ed7b8a538e9d834d4f5182ad97ec3a4a392655d4088be65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68607d89f9849fc57ed7b8a538e9d834d4f5182ad97ec3a4a392655d4088be65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68607d89f9849fc57ed7b8a538e9d834d4f5182ad97ec3a4a392655d4088be65"}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68607d89f9849fc57ed7b8a538e9d834d4f5182ad97ec3a4a392655d4088be65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68607d89f9849fc57ed7b8a538e9d834d4f5182ad97ec3a4a392655d4088be65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68607d89f9849fc57ed7b8a538e9d834d4f5182ad97ec3a4a392655d4088be65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619"}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68607d89f9849fc57ed7b8a538e9d834d4f5182ad97ec3a4a392655d4088be65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bba3f3a60b2af3bc19a084a098978b9b190cc76e3afadf501e5cd7f5f72cb30d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bba3f3a60b2af3bc19a084a098978b9b190cc76e3afadf501e5cd7f5f72cb30d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68607d89f9849fc57ed7b8a538e9d834d4f5182ad97ec3a4a392655d4088be65"}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68607d89f9849fc57ed7b8a538e9d834d4f5182ad97ec3a4a392655d4088be65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bba3f3a60b2af3bc19a084a098978b9b190cc76e3afadf501e5cd7f5f72cb30d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bba3f3a60b2af3bc19a084a098978b9b190cc76e3afadf501e5cd7f5f72cb30d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bba3f3a60b2af3bc19a084a098978b9b190cc76e3afadf501e5cd7f5f72cb30d"}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bba3f3a60b2af3bc19a084a098978b9b190cc76e3afadf501e5cd7f5f72cb30d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bba3f3a60b2af3bc19a084a098978b9b190cc76e3afadf501e5cd7f5f72cb30d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bba3f3a60b2af3bc19a084a098978b9b190cc76e3afadf501e5cd7f5f72cb30d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bba3f3a60b2af3bc19a084a098978b9b190cc76e3afadf501e5cd7f5f72cb30d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bba3f3a60b2af3bc19a084a098978b9b190cc76e3afadf501e5cd7f5f72cb30d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bba3f3a60b2af3bc19a084a098978b9b190cc76e3afadf501e5cd7f5f72cb30d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bba3f3a60b2af3bc19a084a098978b9b190cc76e3afadf501e5cd7f5f72cb30d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bba3f3a60b2af3bc19a084a098978b9b190cc76e3afadf501e5cd7f5f72cb30d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619"}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bba3f3a60b2af3bc19a084a098978b9b190cc76e3afadf501e5cd7f5f72cb30d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68607d89f9849fc57ed7b8a538e9d834d4f5182ad97ec3a4a392655d4088be65"}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bba3f3a60b2af3bc19a084a098978b9b190cc76e3afadf501e5cd7f5f72cb30d"}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab"}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab"}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab"}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab"}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab"}
{"level":"debug","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab"}
{"level":"debug","ts":"2026-07-05T20:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab"}
{"level":"debug","ts":"2026-07-05T20:08:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be67713898fa056d9c484899bf4606c35d0d42ca114ae9c0b3b25457802fa8b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be67713898fa056d9c484899bf4606c35d0d42ca114ae9c0b3b25457802fa8b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be67713898fa056d9c484899bf4606c35d0d42ca114ae9c0b3b25457802fa8b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be67713898fa056d9c484899bf4606c35d0d42ca114ae9c0b3b25457802fa8b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be67713898fa056d9c484899bf4606c35d0d42ca114ae9c0b3b25457802fa8b9"}
{"level":"debug","ts":"2026-07-05T20:08:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be67713898fa056d9c484899bf4606c35d0d42ca114ae9c0b3b25457802fa8b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be67713898fa056d9c484899bf4606c35d0d42ca114ae9c0b3b25457802fa8b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be67713898fa056d9c484899bf4606c35d0d42ca114ae9c0b3b25457802fa8b9"}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be67713898fa056d9c484899bf4606c35d0d42ca114ae9c0b3b25457802fa8b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be67713898fa056d9c484899bf4606c35d0d42ca114ae9c0b3b25457802fa8b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be67713898fa056d9c484899bf4606c35d0d42ca114ae9c0b3b25457802fa8b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be67713898fa056d9c484899bf4606c35d0d42ca114ae9c0b3b25457802fa8b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be67713898fa056d9c484899bf4606c35d0d42ca114ae9c0b3b25457802fa8b9"}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9"}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9"}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9"}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9"}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9"}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9"}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc"}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc"}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc"}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc"}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc"}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc"}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98"}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98"}
{"level":"info","ts":"2026-07-05T20:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98"}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d51402097b233290b449135864acc0aa68c3eacbc06c4d1733197a1a9a9429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d51402097b233290b449135864acc0aa68c3eacbc06c4d1733197a1a9a9429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d51402097b233290b449135864acc0aa68c3eacbc06c4d1733197a1a9a9429"}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d51402097b233290b449135864acc0aa68c3eacbc06c4d1733197a1a9a9429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d51402097b233290b449135864acc0aa68c3eacbc06c4d1733197a1a9a9429","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d51402097b233290b449135864acc0aa68c3eacbc06c4d1733197a1a9a9429"}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d51402097b233290b449135864acc0aa68c3eacbc06c4d1733197a1a9a9429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5d51402097b233290b449135864acc0aa68c3eacbc06c4d1733197a1a9a9429"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98"}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d51402097b233290b449135864acc0aa68c3eacbc06c4d1733197a1a9a9429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d51402097b233290b449135864acc0aa68c3eacbc06c4d1733197a1a9a9429","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d51402097b233290b449135864acc0aa68c3eacbc06c4d1733197a1a9a9429"}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3469ef63ea6f262ed9701b9ff9f41d45896dcfa9586b07d60571b78efb5bb5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3469ef63ea6f262ed9701b9ff9f41d45896dcfa9586b07d60571b78efb5bb5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3469ef63ea6f262ed9701b9ff9f41d45896dcfa9586b07d60571b78efb5bb5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3469ef63ea6f262ed9701b9ff9f41d45896dcfa9586b07d60571b78efb5bb5c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3469ef63ea6f262ed9701b9ff9f41d45896dcfa9586b07d60571b78efb5bb5c4"}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3469ef63ea6f262ed9701b9ff9f41d45896dcfa9586b07d60571b78efb5bb5c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3469ef63ea6f262ed9701b9ff9f41d45896dcfa9586b07d60571b78efb5bb5c4"}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3469ef63ea6f262ed9701b9ff9f41d45896dcfa9586b07d60571b78efb5bb5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3469ef63ea6f262ed9701b9ff9f41d45896dcfa9586b07d60571b78efb5bb5c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3469ef63ea6f262ed9701b9ff9f41d45896dcfa9586b07d60571b78efb5bb5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3469ef63ea6f262ed9701b9ff9f41d45896dcfa9586b07d60571b78efb5bb5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3469ef63ea6f262ed9701b9ff9f41d45896dcfa9586b07d60571b78efb5bb5c4"}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f"}
{"level":"error","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f"}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f"}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f"}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f"}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f"}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d705c18f8eb223427d651adb3bbfa836079b35e52d5f881d7f114634b20a321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f"}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d705c18f8eb223427d651adb3bbfa836079b35e52d5f881d7f114634b20a321"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb25ecbda007899dbcc283ad6ad2afc96e2b18ac297b7814a0f77ac13b6cc4b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb25ecbda007899dbcc283ad6ad2afc96e2b18ac297b7814a0f77ac13b6cc4b6"}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3469ef63ea6f262ed9701b9ff9f41d45896dcfa9586b07d60571b78efb5bb5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3469ef63ea6f262ed9701b9ff9f41d45896dcfa9586b07d60571b78efb5bb5c4"}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b"}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d51402097b233290b449135864acc0aa68c3eacbc06c4d1733197a1a9a9429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d51402097b233290b449135864acc0aa68c3eacbc06c4d1733197a1a9a9429"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68607d89f9849fc57ed7b8a538e9d834d4f5182ad97ec3a4a392655d4088be65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c646011cdd33c9c97f46eae57c479788c922e01460fe62e0a18fd0fdbccc1a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68607d89f9849fc57ed7b8a538e9d834d4f5182ad97ec3a4a392655d4088be65"}
{"level":"debug","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bba3f3a60b2af3bc19a084a098978b9b190cc76e3afadf501e5cd7f5f72cb30d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c646011cdd33c9c97f46eae57c479788c922e01460fe62e0a18fd0fdbccc1a5"}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be67713898fa056d9c484899bf4606c35d0d42ca114ae9c0b3b25457802fa8b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6"}
{"level":"info","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bba3f3a60b2af3bc19a084a098978b9b190cc76e3afadf501e5cd7f5f72cb30d"}
{"level":"info","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be67713898fa056d9c484899bf4606c35d0d42ca114ae9c0b3b25457802fa8b9"}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f"}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f"}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619"}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f"}
{"level":"info","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab"}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619"}
{"level":"info","ts":"2026-07-05T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc"}
{"level":"info","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52f68369-b54c-4251-8bd8-5fcd886b6ec5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43314","PortSpecifier":{"PortValue":43314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52f68369-b54c-4251-8bd8-5fcd886b6ec5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52f68369-b54c-4251-8bd8-5fcd886b6ec5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43314","PortSpecifier":{"PortValue":43314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282130,"nanos":432998171},"http":{"id":"52f68369-b54c-4251-8bd8-5fcd886b6ec5","method":"POST","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52f68369-b54c-4251-8bd8-5fcd886b6ec5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52f68369-b54c-4251-8bd8-5fcd886b6ec5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52f68369-b54c-4251-8bd8-5fcd886b6ec5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52f68369-b54c-4251-8bd8-5fcd886b6ec5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52f68369-b54c-4251-8bd8-5fcd886b6ec5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52f68369-b54c-4251-8bd8-5fcd886b6ec5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/sub-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52f68369-b54c-4251-8bd8-5fcd886b6ec5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52f68369-b54c-4251-8bd8-5fcd886b6ec5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52f68369-b54c-4251-8bd8-5fcd886b6ec5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52f68369-b54c-4251-8bd8-5fcd886b6ec5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52f68369-b54c-4251-8bd8-5fcd886b6ec5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20f4723a-3aac-4d85-8332-eaf8cfe6becc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35972","PortSpecifier":{"PortValue":35972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20f4723a-3aac-4d85-8332-eaf8cfe6becc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20f4723a-3aac-4d85-8332-eaf8cfe6becc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35972","PortSpecifier":{"PortValue":35972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282130,"nanos":468909075},"http":{"id":"20f4723a-3aac-4d85-8332-eaf8cfe6becc","method":"POST","headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"20f4723a-3aac-4d85-8332-eaf8cfe6becc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20f4723a-3aac-4d85-8332-eaf8cfe6becc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20f4723a-3aac-4d85-8332-eaf8cfe6becc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20f4723a-3aac-4d85-8332-eaf8cfe6becc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20f4723a-3aac-4d85-8332-eaf8cfe6becc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20f4723a-3aac-4d85-8332-eaf8cfe6becc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c11b28/sub-test-model-c11b28\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20f4723a-3aac-4d85-8332-eaf8cfe6becc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20f4723a-3aac-4d85-8332-eaf8cfe6becc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20f4723a-3aac-4d85-8332-eaf8cfe6becc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20f4723a-3aac-4d85-8332-eaf8cfe6becc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20f4723a-3aac-4d85-8332-eaf8cfe6becc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d7d5718-d58f-45d2-978d-60ce84ff0bbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43318","PortSpecifier":{"PortValue":43318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d7d5718-d58f-45d2-978d-60ce84ff0bbd","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d7d5718-d58f-45d2-978d-60ce84ff0bbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43318","PortSpecifier":{"PortValue":43318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282130,"nanos":503566678},"http":{"id":"6d7d5718-d58f-45d2-978d-60ce84ff0bbd","method":"GET","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d7d5718-d58f-45d2-978d-60ce84ff0bbd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Xp7ot2l03UiNVn78_rydchSSm012xgYRjGCIvpPOGL4S4av3EXSWJyNSFAmD"}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d7d5718-d58f-45d2-978d-60ce84ff0bbd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Xp7ot2l03UiNVn78_rydchSSm012xgYRjGCIvpPOGL4S4av3EXSWJyNSFAmD\"}"}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d7d5718-d58f-45d2-978d-60ce84ff0bbd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"388f6ca2-ce4d-4c1e-80fc-ba2827fb97f4","keyName":"e2e-sub-iso-386332","subscription":"e2e-a-only-68cf1f","tenant":"e2e-shared-a-ec8ab7","userId":"388f6ca2-ce4d-4c1e-80fc-ba2827fb97f4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d7d5718-d58f-45d2-978d-60ce84ff0bbd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d7d5718-d58f-45d2-978d-60ce84ff0bbd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d7d5718-d58f-45d2-978d-60ce84ff0bbd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d7d5718-d58f-45d2-978d-60ce84ff0bbd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/sub-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d7d5718-d58f-45d2-978d-60ce84ff0bbd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d7d5718-d58f-45d2-978d-60ce84ff0bbd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d7d5718-d58f-45d2-978d-60ce84ff0bbd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d7d5718-d58f-45d2-978d-60ce84ff0bbd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-68cf1f"}
{"level":"info","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d7d5718-d58f-45d2-978d-60ce84ff0bbd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d7d5718-d58f-45d2-978d-60ce84ff0bbd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e7fc996-422b-426b-9567-ea84aa7131ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35988","PortSpecifier":{"PortValue":35988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e7fc996-422b-426b-9567-ea84aa7131ba","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e7fc996-422b-426b-9567-ea84aa7131ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35988","PortSpecifier":{"PortValue":35988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282130,"nanos":538205521},"http":{"id":"6e7fc996-422b-426b-9567-ea84aa7131ba","method":"GET","headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e7fc996-422b-426b-9567-ea84aa7131ba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KBlqdsU0k2gIc9lU_eLgX6nUTpGeHIdFUEknMwceZSBPEDoMNchU9qf9rr9d"}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6e7fc996-422b-426b-9567-ea84aa7131ba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c11b28.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KBlqdsU0k2gIc9lU_eLgX6nUTpGeHIdFUEknMwceZSBPEDoMNchU9qf9rr9d\"}"}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6e7fc996-422b-426b-9567-ea84aa7131ba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c11b28.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b755175-37fe-498c-821c-31f6de7ac318","keyName":"e2e-sub-iso-7eb734","subscription":"e2e-b-only-68cf1f","tenant":"e2e-shared-b-c11b28","userId":"7b755175-37fe-498c-821c-31f6de7ac318","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e7fc996-422b-426b-9567-ea84aa7131ba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e7fc996-422b-426b-9567-ea84aa7131ba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e7fc996-422b-426b-9567-ea84aa7131ba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e7fc996-422b-426b-9567-ea84aa7131ba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c11b28/sub-test-model-c11b28\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e7fc996-422b-426b-9567-ea84aa7131ba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e7fc996-422b-426b-9567-ea84aa7131ba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-68cf1f"}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6e7fc996-422b-426b-9567-ea84aa7131ba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e7fc996-422b-426b-9567-ea84aa7131ba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e7fc996-422b-426b-9567-ea84aa7131ba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:08:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e7fc996-422b-426b-9567-ea84aa7131ba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9880c780-5abb-4fdf-a362-d803bf08c2bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55960","PortSpecifier":{"PortValue":55960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9880c780-5abb-4fdf-a362-d803bf08c2bb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9880c780-5abb-4fdf-a362-d803bf08c2bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55960","PortSpecifier":{"PortValue":55960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282140,"nanos":385307214},"http":{"id":"9880c780-5abb-4fdf-a362-d803bf08c2bb","method":"POST","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9880c780-5abb-4fdf-a362-d803bf08c2bb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9880c780-5abb-4fdf-a362-d803bf08c2bb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9880c780-5abb-4fdf-a362-d803bf08c2bb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9880c780-5abb-4fdf-a362-d803bf08c2bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9880c780-5abb-4fdf-a362-d803bf08c2bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9880c780-5abb-4fdf-a362-d803bf08c2bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/sub-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9880c780-5abb-4fdf-a362-d803bf08c2bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9880c780-5abb-4fdf-a362-d803bf08c2bb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9880c780-5abb-4fdf-a362-d803bf08c2bb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9880c780-5abb-4fdf-a362-d803bf08c2bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9880c780-5abb-4fdf-a362-d803bf08c2bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0af4d969-b1c1-428b-8fa8-24c76ce5ba40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39584","PortSpecifier":{"PortValue":39584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0af4d969-b1c1-428b-8fa8-24c76ce5ba40","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0af4d969-b1c1-428b-8fa8-24c76ce5ba40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39584","PortSpecifier":{"PortValue":39584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282140,"nanos":419009280},"http":{"id":"0af4d969-b1c1-428b-8fa8-24c76ce5ba40","method":"POST","headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0af4d969-b1c1-428b-8fa8-24c76ce5ba40","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0af4d969-b1c1-428b-8fa8-24c76ce5ba40","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0af4d969-b1c1-428b-8fa8-24c76ce5ba40","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0af4d969-b1c1-428b-8fa8-24c76ce5ba40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0af4d969-b1c1-428b-8fa8-24c76ce5ba40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0af4d969-b1c1-428b-8fa8-24c76ce5ba40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c11b28/sub-test-model-c11b28\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0af4d969-b1c1-428b-8fa8-24c76ce5ba40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0af4d969-b1c1-428b-8fa8-24c76ce5ba40","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0af4d969-b1c1-428b-8fa8-24c76ce5ba40","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0af4d969-b1c1-428b-8fa8-24c76ce5ba40","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0af4d969-b1c1-428b-8fa8-24c76ce5ba40","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5942815e-d31e-4858-9978-3cdecf462a1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55974","PortSpecifier":{"PortValue":55974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5942815e-d31e-4858-9978-3cdecf462a1e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5942815e-d31e-4858-9978-3cdecf462a1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55974","PortSpecifier":{"PortValue":55974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282140,"nanos":450249586},"http":{"id":"5942815e-d31e-4858-9978-3cdecf462a1e","method":"POST","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5942815e-d31e-4858-9978-3cdecf462a1e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17zwm8EDuAYciSu72_W4pQIEwWMHaBnVWThpj8DPpfmtMc9WZwar3bT9BSf1J"}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5942815e-d31e-4858-9978-3cdecf462a1e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17zwm8EDuAYciSu72_W4pQIEwWMHaBnVWThpj8DPpfmtMc9WZwar3bT9BSf1J\"}"}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5942815e-d31e-4858-9978-3cdecf462a1e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da1dc4fc-42dd-4e70-8918-10b97ab0d8ea","keyName":"e2e-sub-iso-cb596c","subscription":"e2e-shared-sub-130ced","tenant":"e2e-shared-a-ec8ab7","userId":"da1dc4fc-42dd-4e70-8918-10b97ab0d8ea","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5942815e-d31e-4858-9978-3cdecf462a1e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5942815e-d31e-4858-9978-3cdecf462a1e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5942815e-d31e-4858-9978-3cdecf462a1e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5942815e-d31e-4858-9978-3cdecf462a1e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/sub-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5942815e-d31e-4858-9978-3cdecf462a1e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5942815e-d31e-4858-9978-3cdecf462a1e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5942815e-d31e-4858-9978-3cdecf462a1e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-130ced"}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5942815e-d31e-4858-9978-3cdecf462a1e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5942815e-d31e-4858-9978-3cdecf462a1e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5942815e-d31e-4858-9978-3cdecf462a1e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1edd220a-3e79-4eb4-a995-d7c395d2b959","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39598","PortSpecifier":{"PortValue":39598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1edd220a-3e79-4eb4-a995-d7c395d2b959","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1edd220a-3e79-4eb4-a995-d7c395d2b959","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39598","PortSpecifier":{"PortValue":39598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282140,"nanos":477559399},"http":{"id":"1edd220a-3e79-4eb4-a995-d7c395d2b959","method":"POST","headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1edd220a-3e79-4eb4-a995-d7c395d2b959","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GKRoIbrHUdUcO2kl_yTpKPmmJ12UwgzNF3VTjYkLuet7OvP65PZqBkkVzC76"}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1edd220a-3e79-4eb4-a995-d7c395d2b959","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c11b28.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GKRoIbrHUdUcO2kl_yTpKPmmJ12UwgzNF3VTjYkLuet7OvP65PZqBkkVzC76\"}"}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1edd220a-3e79-4eb4-a995-d7c395d2b959","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c11b28.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b0b253c2-5011-47e5-80d8-2c388d91d138","keyName":"e2e-sub-iso-1467b6","subscription":"e2e-shared-sub-130ced","tenant":"e2e-shared-b-c11b28","userId":"b0b253c2-5011-47e5-80d8-2c388d91d138","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1edd220a-3e79-4eb4-a995-d7c395d2b959","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1edd220a-3e79-4eb4-a995-d7c395d2b959","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1edd220a-3e79-4eb4-a995-d7c395d2b959","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1edd220a-3e79-4eb4-a995-d7c395d2b959","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c11b28/sub-test-model-c11b28\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1edd220a-3e79-4eb4-a995-d7c395d2b959","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1edd220a-3e79-4eb4-a995-d7c395d2b959","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1edd220a-3e79-4eb4-a995-d7c395d2b959","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-130ced"}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1edd220a-3e79-4eb4-a995-d7c395d2b959","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1edd220a-3e79-4eb4-a995-d7c395d2b959","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1edd220a-3e79-4eb4-a995-d7c395d2b959","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6093b56f67500ebe07b0b907d5e95dc3c58a3d21a9dd8cabb3fe53419b30f26f"}
{"level":"info","ts":"2026-07-05T20:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bba3f3a60b2af3bc19a084a098978b9b190cc76e3afadf501e5cd7f5f72cb30d"}
{"level":"info","ts":"2026-07-05T20:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be67713898fa056d9c484899bf4606c35d0d42ca114ae9c0b3b25457802fa8b9"}
{"level":"info","ts":"2026-07-05T20:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80d750f7042c984e682531cce2a2634ce1d00fffc73d786b5c183174bc2147dc"}
{"level":"info","ts":"2026-07-05T20:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3469ef63ea6f262ed9701b9ff9f41d45896dcfa9586b07d60571b78efb5bb5c4"}
{"level":"info","ts":"2026-07-05T20:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fabe9c0d4b29602d061c8953917e4536c7c37364d9247930c17bc47c4405619"}
{"level":"info","ts":"2026-07-05T20:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb25ecbda007899dbcc283ad6ad2afc96e2b18ac297b7814a0f77ac13b6cc4b6"}
{"level":"info","ts":"2026-07-05T20:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6af404e9e191bc6081620ad4d001bbda31484bf6194caeb65705415d27c89aab"}
{"level":"info","ts":"2026-07-05T20:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/348802cd8c23096d5b1695c31244b06b4d0ae63f264c62c07aa6e5b28e69de8b"}
{"level":"info","ts":"2026-07-05T20:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1081ed9022a5ea2628a6c80b1757e4d649e474bcb2709e0d1852c7018dba80e9"}
{"level":"info","ts":"2026-07-05T20:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3b80f6266b02d08b56272db83f5fe2cb46abe5c8ab251c0155a891c3e9e7f4f"}
{"level":"info","ts":"2026-07-05T20:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68607d89f9849fc57ed7b8a538e9d834d4f5182ad97ec3a4a392655d4088be65"}
{"level":"info","ts":"2026-07-05T20:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d705c18f8eb223427d651adb3bbfa836079b35e52d5f881d7f114634b20a321"}
{"level":"info","ts":"2026-07-05T20:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1fa7e770d945fdc27b40940a8e304bf17420eaedd780e987e7f17cfddffca98"}
{"level":"info","ts":"2026-07-05T20:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5d51402097b233290b449135864acc0aa68c3eacbc06c4d1733197a1a9a9429"}
{"level":"info","ts":"2026-07-05T20:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c646011cdd33c9c97f46eae57c479788c922e01460fe62e0a18fd0fdbccc1a5"}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86"}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86"}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86"}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86"}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2efa17e28fbccd29a76c74fede110dc07c3f74e113234f7eec49de3cfa911033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86"}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2efa17e28fbccd29a76c74fede110dc07c3f74e113234f7eec49de3cfa911033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2efa17e28fbccd29a76c74fede110dc07c3f74e113234f7eec49de3cfa911033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2efa17e28fbccd29a76c74fede110dc07c3f74e113234f7eec49de3cfa911033"}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2efa17e28fbccd29a76c74fede110dc07c3f74e113234f7eec49de3cfa911033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2efa17e28fbccd29a76c74fede110dc07c3f74e113234f7eec49de3cfa911033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2efa17e28fbccd29a76c74fede110dc07c3f74e113234f7eec49de3cfa911033","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2efa17e28fbccd29a76c74fede110dc07c3f74e113234f7eec49de3cfa911033\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2efa17e28fbccd29a76c74fede110dc07c3f74e113234f7eec49de3cfa911033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2efa17e28fbccd29a76c74fede110dc07c3f74e113234f7eec49de3cfa911033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2efa17e28fbccd29a76c74fede110dc07c3f74e113234f7eec49de3cfa911033"}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2efa17e28fbccd29a76c74fede110dc07c3f74e113234f7eec49de3cfa911033"}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77acf351e0d9dc0a68057e2c06eaad80f3fce43015da3323d1545e31eebe2382","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77acf351e0d9dc0a68057e2c06eaad80f3fce43015da3323d1545e31eebe2382","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77acf351e0d9dc0a68057e2c06eaad80f3fce43015da3323d1545e31eebe2382","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2efa17e28fbccd29a76c74fede110dc07c3f74e113234f7eec49de3cfa911033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2efa17e28fbccd29a76c74fede110dc07c3f74e113234f7eec49de3cfa911033"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77acf351e0d9dc0a68057e2c06eaad80f3fce43015da3323d1545e31eebe2382"}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2efa17e28fbccd29a76c74fede110dc07c3f74e113234f7eec49de3cfa911033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77acf351e0d9dc0a68057e2c06eaad80f3fce43015da3323d1545e31eebe2382","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2efa17e28fbccd29a76c74fede110dc07c3f74e113234f7eec49de3cfa911033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77acf351e0d9dc0a68057e2c06eaad80f3fce43015da3323d1545e31eebe2382"}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77acf351e0d9dc0a68057e2c06eaad80f3fce43015da3323d1545e31eebe2382","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77acf351e0d9dc0a68057e2c06eaad80f3fce43015da3323d1545e31eebe2382"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77acf351e0d9dc0a68057e2c06eaad80f3fce43015da3323d1545e31eebe2382","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77acf351e0d9dc0a68057e2c06eaad80f3fce43015da3323d1545e31eebe2382","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2efa17e28fbccd29a76c74fede110dc07c3f74e113234f7eec49de3cfa911033"}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77acf351e0d9dc0a68057e2c06eaad80f3fce43015da3323d1545e31eebe2382"}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb8fdd1d84eae74db39e1684c18c1db04a50b8c97e5a28afdf9e1732100ef87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb8fdd1d84eae74db39e1684c18c1db04a50b8c97e5a28afdf9e1732100ef87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb8fdd1d84eae74db39e1684c18c1db04a50b8c97e5a28afdf9e1732100ef87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb8fdd1d84eae74db39e1684c18c1db04a50b8c97e5a28afdf9e1732100ef87"}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb8fdd1d84eae74db39e1684c18c1db04a50b8c97e5a28afdf9e1732100ef87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb8fdd1d84eae74db39e1684c18c1db04a50b8c97e5a28afdf9e1732100ef87"}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb8fdd1d84eae74db39e1684c18c1db04a50b8c97e5a28afdf9e1732100ef87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb8fdd1d84eae74db39e1684c18c1db04a50b8c97e5a28afdf9e1732100ef87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb8fdd1d84eae74db39e1684c18c1db04a50b8c97e5a28afdf9e1732100ef87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb8fdd1d84eae74db39e1684c18c1db04a50b8c97e5a28afdf9e1732100ef87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb8fdd1d84eae74db39e1684c18c1db04a50b8c97e5a28afdf9e1732100ef87"}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ce43141634e905146aa29eef1b57649710988e0a8329f8129b1d1c6fcf1dfc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036"}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ce43141634e905146aa29eef1b57649710988e0a8329f8129b1d1c6fcf1dfc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ce43141634e905146aa29eef1b57649710988e0a8329f8129b1d1c6fcf1dfc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ce43141634e905146aa29eef1b57649710988e0a8329f8129b1d1c6fcf1dfc7"}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ce43141634e905146aa29eef1b57649710988e0a8329f8129b1d1c6fcf1dfc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ce43141634e905146aa29eef1b57649710988e0a8329f8129b1d1c6fcf1dfc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ce43141634e905146aa29eef1b57649710988e0a8329f8129b1d1c6fcf1dfc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036"}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ce43141634e905146aa29eef1b57649710988e0a8329f8129b1d1c6fcf1dfc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ce43141634e905146aa29eef1b57649710988e0a8329f8129b1d1c6fcf1dfc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ce43141634e905146aa29eef1b57649710988e0a8329f8129b1d1c6fcf1dfc7"}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ce43141634e905146aa29eef1b57649710988e0a8329f8129b1d1c6fcf1dfc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ce43141634e905146aa29eef1b57649710988e0a8329f8129b1d1c6fcf1dfc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ce43141634e905146aa29eef1b57649710988e0a8329f8129b1d1c6fcf1dfc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036"}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ce43141634e905146aa29eef1b57649710988e0a8329f8129b1d1c6fcf1dfc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbd6272b092c7a9f4a96f786aaf980711440487cea52103f993dcc735c3ca176","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbd6272b092c7a9f4a96f786aaf980711440487cea52103f993dcc735c3ca176","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ce43141634e905146aa29eef1b57649710988e0a8329f8129b1d1c6fcf1dfc7"}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ce43141634e905146aa29eef1b57649710988e0a8329f8129b1d1c6fcf1dfc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbd6272b092c7a9f4a96f786aaf980711440487cea52103f993dcc735c3ca176","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbd6272b092c7a9f4a96f786aaf980711440487cea52103f993dcc735c3ca176"}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbd6272b092c7a9f4a96f786aaf980711440487cea52103f993dcc735c3ca176","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbd6272b092c7a9f4a96f786aaf980711440487cea52103f993dcc735c3ca176","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbd6272b092c7a9f4a96f786aaf980711440487cea52103f993dcc735c3ca176"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036"}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbd6272b092c7a9f4a96f786aaf980711440487cea52103f993dcc735c3ca176","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbd6272b092c7a9f4a96f786aaf980711440487cea52103f993dcc735c3ca176","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ce43141634e905146aa29eef1b57649710988e0a8329f8129b1d1c6fcf1dfc7"}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbd6272b092c7a9f4a96f786aaf980711440487cea52103f993dcc735c3ca176"}
{"level":"info","ts":"2026-07-05T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036"}
{"level":"debug","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38b0ff0f4f0e2f62d8b27cfe8fcec66a06d358e49883a4b89a28617b00513145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38b0ff0f4f0e2f62d8b27cfe8fcec66a06d358e49883a4b89a28617b00513145","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38b0ff0f4f0e2f62d8b27cfe8fcec66a06d358e49883a4b89a28617b00513145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38b0ff0f4f0e2f62d8b27cfe8fcec66a06d358e49883a4b89a28617b00513145"}
{"level":"info","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38b0ff0f4f0e2f62d8b27cfe8fcec66a06d358e49883a4b89a28617b00513145","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38b0ff0f4f0e2f62d8b27cfe8fcec66a06d358e49883a4b89a28617b00513145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"38b0ff0f4f0e2f62d8b27cfe8fcec66a06d358e49883a4b89a28617b00513145","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"38b0ff0f4f0e2f62d8b27cfe8fcec66a06d358e49883a4b89a28617b00513145\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38b0ff0f4f0e2f62d8b27cfe8fcec66a06d358e49883a4b89a28617b00513145","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38b0ff0f4f0e2f62d8b27cfe8fcec66a06d358e49883a4b89a28617b00513145","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38b0ff0f4f0e2f62d8b27cfe8fcec66a06d358e49883a4b89a28617b00513145"}
{"level":"info","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38b0ff0f4f0e2f62d8b27cfe8fcec66a06d358e49883a4b89a28617b00513145"}
{"level":"debug","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38b0ff0f4f0e2f62d8b27cfe8fcec66a06d358e49883a4b89a28617b00513145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38b0ff0f4f0e2f62d8b27cfe8fcec66a06d358e49883a4b89a28617b00513145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38b0ff0f4f0e2f62d8b27cfe8fcec66a06d358e49883a4b89a28617b00513145","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38b0ff0f4f0e2f62d8b27cfe8fcec66a06d358e49883a4b89a28617b00513145","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38b0ff0f4f0e2f62d8b27cfe8fcec66a06d358e49883a4b89a28617b00513145"}
{"level":"debug","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402"}
{"level":"debug","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402"}
{"level":"debug","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402"}
{"level":"debug","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402"}
{"level":"debug","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402"}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8"}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8"}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a94826cbcb1e33bdba61716100b1982c129723025566a433bcdfb76ebf9e54c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a94826cbcb1e33bdba61716100b1982c129723025566a433bcdfb76ebf9e54c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a94826cbcb1e33bdba61716100b1982c129723025566a433bcdfb76ebf9e54c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94826cbcb1e33bdba61716100b1982c129723025566a433bcdfb76ebf9e54c0"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a94826cbcb1e33bdba61716100b1982c129723025566a433bcdfb76ebf9e54c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a94826cbcb1e33bdba61716100b1982c129723025566a433bcdfb76ebf9e54c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a94826cbcb1e33bdba61716100b1982c129723025566a433bcdfb76ebf9e54c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a94826cbcb1e33bdba61716100b1982c129723025566a433bcdfb76ebf9e54c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a94826cbcb1e33bdba61716100b1982c129723025566a433bcdfb76ebf9e54c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94826cbcb1e33bdba61716100b1982c129723025566a433bcdfb76ebf9e54c0"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a94826cbcb1e33bdba61716100b1982c129723025566a433bcdfb76ebf9e54c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a94826cbcb1e33bdba61716100b1982c129723025566a433bcdfb76ebf9e54c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a94826cbcb1e33bdba61716100b1982c129723025566a433bcdfb76ebf9e54c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a94826cbcb1e33bdba61716100b1982c129723025566a433bcdfb76ebf9e54c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f0271b8acb51ac4ff7c45c0484e676fb0e5d9f0e196fb121b6bb9be6e02e72f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94826cbcb1e33bdba61716100b1982c129723025566a433bcdfb76ebf9e54c0"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f0271b8acb51ac4ff7c45c0484e676fb0e5d9f0e196fb121b6bb9be6e02e72f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94826cbcb1e33bdba61716100b1982c129723025566a433bcdfb76ebf9e54c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f0271b8acb51ac4ff7c45c0484e676fb0e5d9f0e196fb121b6bb9be6e02e72f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f0271b8acb51ac4ff7c45c0484e676fb0e5d9f0e196fb121b6bb9be6e02e72f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f0271b8acb51ac4ff7c45c0484e676fb0e5d9f0e196fb121b6bb9be6e02e72f"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f0271b8acb51ac4ff7c45c0484e676fb0e5d9f0e196fb121b6bb9be6e02e72f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f0271b8acb51ac4ff7c45c0484e676fb0e5d9f0e196fb121b6bb9be6e02e72f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f0271b8acb51ac4ff7c45c0484e676fb0e5d9f0e196fb121b6bb9be6e02e72f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f0271b8acb51ac4ff7c45c0484e676fb0e5d9f0e196fb121b6bb9be6e02e72f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f0271b8acb51ac4ff7c45c0484e676fb0e5d9f0e196fb121b6bb9be6e02e72f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94826cbcb1e33bdba61716100b1982c129723025566a433bcdfb76ebf9e54c0"}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f0271b8acb51ac4ff7c45c0484e676fb0e5d9f0e196fb121b6bb9be6e02e72f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f0271b8acb51ac4ff7c45c0484e676fb0e5d9f0e196fb121b6bb9be6e02e72f"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274"}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b60fdf9a128062de8dea3dca4c9bd3e211128c1d5c2e88cce173a44c4e5a4169","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b60fdf9a128062de8dea3dca4c9bd3e211128c1d5c2e88cce173a44c4e5a4169"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b60fdf9a128062de8dea3dca4c9bd3e211128c1d5c2e88cce173a44c4e5a4169","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b60fdf9a128062de8dea3dca4c9bd3e211128c1d5c2e88cce173a44c4e5a4169","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b60fdf9a128062de8dea3dca4c9bd3e211128c1d5c2e88cce173a44c4e5a4169","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b60fdf9a128062de8dea3dca4c9bd3e211128c1d5c2e88cce173a44c4e5a4169"}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b60fdf9a128062de8dea3dca4c9bd3e211128c1d5c2e88cce173a44c4e5a4169","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b60fdf9a128062de8dea3dca4c9bd3e211128c1d5c2e88cce173a44c4e5a4169"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b60fdf9a128062de8dea3dca4c9bd3e211128c1d5c2e88cce173a44c4e5a4169","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b60fdf9a128062de8dea3dca4c9bd3e211128c1d5c2e88cce173a44c4e5a4169","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274"}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b60fdf9a128062de8dea3dca4c9bd3e211128c1d5c2e88cce173a44c4e5a4169"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274"}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274"}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274"}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274"}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274"}
{"level":"debug","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"}
{"level":"debug","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"}
{"level":"debug","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"}
{"level":"debug","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"}
{"level":"debug","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"}
{"level":"debug","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"}
{"level":"info","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"}
{"level":"debug","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc"}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402"}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ce43141634e905146aa29eef1b57649710988e0a8329f8129b1d1c6fcf1dfc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ce43141634e905146aa29eef1b57649710988e0a8329f8129b1d1c6fcf1dfc7"}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6"}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6"}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6"}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b"}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8"}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8"}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8"}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86"}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8"}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8"}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77acf351e0d9dc0a68057e2c06eaad80f3fce43015da3323d1545e31eebe2382","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8"}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77acf351e0d9dc0a68057e2c06eaad80f3fce43015da3323d1545e31eebe2382"}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8"}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8"}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8"}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2efa17e28fbccd29a76c74fede110dc07c3f74e113234f7eec49de3cfa911033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274"}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036"}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2efa17e28fbccd29a76c74fede110dc07c3f74e113234f7eec49de3cfa911033"}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b60fdf9a128062de8dea3dca4c9bd3e211128c1d5c2e88cce173a44c4e5a4169","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94826cbcb1e33bdba61716100b1982c129723025566a433bcdfb76ebf9e54c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b60fdf9a128062de8dea3dca4c9bd3e211128c1d5c2e88cce173a44c4e5a4169"}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb8fdd1d84eae74db39e1684c18c1db04a50b8c97e5a28afdf9e1732100ef87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94826cbcb1e33bdba61716100b1982c129723025566a433bcdfb76ebf9e54c0"}
{"level":"debug","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38b0ff0f4f0e2f62d8b27cfe8fcec66a06d358e49883a4b89a28617b00513145","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb8fdd1d84eae74db39e1684c18c1db04a50b8c97e5a28afdf9e1732100ef87"}
{"level":"info","ts":"2026-07-05T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38b0ff0f4f0e2f62d8b27cfe8fcec66a06d358e49883a4b89a28617b00513145"}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f0271b8acb51ac4ff7c45c0484e676fb0e5d9f0e196fb121b6bb9be6e02e72f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbd6272b092c7a9f4a96f786aaf980711440487cea52103f993dcc735c3ca176","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f0271b8acb51ac4ff7c45c0484e676fb0e5d9f0e196fb121b6bb9be6e02e72f"}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbd6272b092c7a9f4a96f786aaf980711440487cea52103f993dcc735c3ca176"}
{"level":"error","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"}
{"level":"error","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"}
{"level":"info","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9ac0530-8c26-41fd-ade0-d0fc3d5d5707","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59852","PortSpecifier":{"PortValue":59852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9ac0530-8c26-41fd-ade0-d0fc3d5d5707","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9ac0530-8c26-41fd-ade0-d0fc3d5d5707","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59852","PortSpecifier":{"PortValue":59852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282219,"nanos":122228813},"http":{"id":"b9ac0530-8c26-41fd-ade0-d0fc3d5d5707","method":"POST","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b9ac0530-8c26-41fd-ade0-d0fc3d5d5707","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9ac0530-8c26-41fd-ade0-d0fc3d5d5707","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9ac0530-8c26-41fd-ade0-d0fc3d5d5707","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9ac0530-8c26-41fd-ade0-d0fc3d5d5707","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9ac0530-8c26-41fd-ade0-d0fc3d5d5707","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9ac0530-8c26-41fd-ade0-d0fc3d5d5707","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9ac0530-8c26-41fd-ade0-d0fc3d5d5707","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9ac0530-8c26-41fd-ade0-d0fc3d5d5707","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9ac0530-8c26-41fd-ade0-d0fc3d5d5707","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9ac0530-8c26-41fd-ade0-d0fc3d5d5707","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9ac0530-8c26-41fd-ade0-d0fc3d5d5707","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f043d312-3f62-4f1d-b59e-ca688f580b9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37994","PortSpecifier":{"PortValue":37994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f043d312-3f62-4f1d-b59e-ca688f580b9d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f043d312-3f62-4f1d-b59e-ca688f580b9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37994","PortSpecifier":{"PortValue":37994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282219,"nanos":181533566},"http":{"id":"f043d312-3f62-4f1d-b59e-ca688f580b9d","method":"POST","headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f043d312-3f62-4f1d-b59e-ca688f580b9d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f043d312-3f62-4f1d-b59e-ca688f580b9d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f043d312-3f62-4f1d-b59e-ca688f580b9d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f043d312-3f62-4f1d-b59e-ca688f580b9d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f043d312-3f62-4f1d-b59e-ca688f580b9d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f043d312-3f62-4f1d-b59e-ca688f580b9d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c11b28/rate-test-model-c11b28\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f043d312-3f62-4f1d-b59e-ca688f580b9d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f043d312-3f62-4f1d-b59e-ca688f580b9d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f043d312-3f62-4f1d-b59e-ca688f580b9d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f043d312-3f62-4f1d-b59e-ca688f580b9d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f043d312-3f62-4f1d-b59e-ca688f580b9d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"298d4508-e1b3-4566-8550-958a702da5de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59868","PortSpecifier":{"PortValue":59868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"298d4508-e1b3-4566-8550-958a702da5de","method":"POST","path":"/ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7/v1/completions","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"298d4508-e1b3-4566-8550-958a702da5de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59868","PortSpecifier":{"PortValue":59868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282219,"nanos":220463060},"http":{"id":"298d4508-e1b3-4566-8550-958a702da5de","method":"POST","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"298d4508-e1b3-4566-8550-958a702da5de","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mKvxB6DTldzIbyrH_mB84e39imcn4biN45Zjvw41sXj5u97T9vxwSECi5G51"}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"298d4508-e1b3-4566-8550-958a702da5de","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mKvxB6DTldzIbyrH_mB84e39imcn4biN45Zjvw41sXj5u97T9vxwSECi5G51\"}"}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"298d4508-e1b3-4566-8550-958a702da5de","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"92f7bcba-6803-4e8f-9021-bf72b17b5bb2","keyName":"e2e-rate-a-8b02b9","subscription":"e2e-rate-iso-a-8b02b9","tenant":"e2e-shared-a-ec8ab7","userId":"92f7bcba-6803-4e8f-9021-bf72b17b5bb2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"298d4508-e1b3-4566-8550-958a702da5de","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7\",\"requestedSubscription\":\"e2e-rate-iso-a-8b02b9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"298d4508-e1b3-4566-8550-958a702da5de","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ec8ab7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b02b9","namespace":"ai-tenant-e2e-shared-a-ec8ab7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"298d4508-e1b3-4566-8550-958a702da5de","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"298d4508-e1b3-4566-8550-958a702da5de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"298d4508-e1b3-4566-8550-958a702da5de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"298d4508-e1b3-4566-8550-958a702da5de","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"298d4508-e1b3-4566-8550-958a702da5de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"298d4508-e1b3-4566-8550-958a702da5de","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"298d4508-e1b3-4566-8550-958a702da5de","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"298d4508-e1b3-4566-8550-958a702da5de","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b02b9"}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"298d4508-e1b3-4566-8550-958a702da5de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"92f7bcba-6803-4e8f-9021-bf72b17b5bb2","keyName":"e2e-rate-a-8b02b9","selected_subscription":"e2e-rate-iso-a-8b02b9","selected_subscription_key":"ai-tenant-e2e-shared-a-ec8ab7/e2e-rate-iso-a-8b02b9@ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ec8ab7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b02b9","namespace":"ai-tenant-e2e-shared-a-ec8ab7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"298d4508-e1b3-4566-8550-958a702da5de","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:10:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"298d4508-e1b3-4566-8550-958a702da5de","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:10:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f01fd6bc-c330-4b06-ac54-34780172db1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59870","PortSpecifier":{"PortValue":59870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f01fd6bc-c330-4b06-ac54-34780172db1b","method":"POST","path":"/ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7/v1/completions","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:10:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f01fd6bc-c330-4b06-ac54-34780172db1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59870","PortSpecifier":{"PortValue":59870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282220,"nanos":279819028},"http":{"id":"f01fd6bc-c330-4b06-ac54-34780172db1b","method":"POST","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f01fd6bc-c330-4b06-ac54-34780172db1b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mKvxB6DTldzIbyrH_mB84e39imcn4biN45Zjvw41sXj5u97T9vxwSECi5G51"}
{"level":"debug","ts":"2026-07-05T20:10:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f01fd6bc-c330-4b06-ac54-34780172db1b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mKvxB6DTldzIbyrH_mB84e39imcn4biN45Zjvw41sXj5u97T9vxwSECi5G51\"}"}
{"level":"debug","ts":"2026-07-05T20:10:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f01fd6bc-c330-4b06-ac54-34780172db1b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"92f7bcba-6803-4e8f-9021-bf72b17b5bb2","keyName":"e2e-rate-a-8b02b9","subscription":"e2e-rate-iso-a-8b02b9","tenant":"e2e-shared-a-ec8ab7","userId":"92f7bcba-6803-4e8f-9021-bf72b17b5bb2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:10:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f01fd6bc-c330-4b06-ac54-34780172db1b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7\",\"requestedSubscription\":\"e2e-rate-iso-a-8b02b9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:10:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f01fd6bc-c330-4b06-ac54-34780172db1b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ec8ab7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b02b9","namespace":"ai-tenant-e2e-shared-a-ec8ab7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f01fd6bc-c330-4b06-ac54-34780172db1b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f01fd6bc-c330-4b06-ac54-34780172db1b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f01fd6bc-c330-4b06-ac54-34780172db1b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f01fd6bc-c330-4b06-ac54-34780172db1b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f01fd6bc-c330-4b06-ac54-34780172db1b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f01fd6bc-c330-4b06-ac54-34780172db1b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f01fd6bc-c330-4b06-ac54-34780172db1b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f01fd6bc-c330-4b06-ac54-34780172db1b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b02b9"}
{"level":"debug","ts":"2026-07-05T20:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f01fd6bc-c330-4b06-ac54-34780172db1b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"92f7bcba-6803-4e8f-9021-bf72b17b5bb2","keyName":"e2e-rate-a-8b02b9","selected_subscription":"e2e-rate-iso-a-8b02b9","selected_subscription_key":"ai-tenant-e2e-shared-a-ec8ab7/e2e-rate-iso-a-8b02b9@ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ec8ab7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b02b9","namespace":"ai-tenant-e2e-shared-a-ec8ab7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:10:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f01fd6bc-c330-4b06-ac54-34780172db1b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:10:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f01fd6bc-c330-4b06-ac54-34780172db1b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:10:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b60ac2a0-8d01-466c-b313-46ace81d826d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59880","PortSpecifier":{"PortValue":59880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b60ac2a0-8d01-466c-b313-46ace81d826d","method":"POST","path":"/ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7/v1/completions","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:10:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b60ac2a0-8d01-466c-b313-46ace81d826d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59880","PortSpecifier":{"PortValue":59880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282221,"nanos":315421647},"http":{"id":"b60ac2a0-8d01-466c-b313-46ace81d826d","method":"POST","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b60ac2a0-8d01-466c-b313-46ace81d826d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mKvxB6DTldzIbyrH_mB84e39imcn4biN45Zjvw41sXj5u97T9vxwSECi5G51"}
{"level":"debug","ts":"2026-07-05T20:10:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b60ac2a0-8d01-466c-b313-46ace81d826d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mKvxB6DTldzIbyrH_mB84e39imcn4biN45Zjvw41sXj5u97T9vxwSECi5G51\"}"}
{"level":"debug","ts":"2026-07-05T20:10:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b60ac2a0-8d01-466c-b313-46ace81d826d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"92f7bcba-6803-4e8f-9021-bf72b17b5bb2","keyName":"e2e-rate-a-8b02b9","subscription":"e2e-rate-iso-a-8b02b9","tenant":"e2e-shared-a-ec8ab7","userId":"92f7bcba-6803-4e8f-9021-bf72b17b5bb2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:10:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b60ac2a0-8d01-466c-b313-46ace81d826d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7\",\"requestedSubscription\":\"e2e-rate-iso-a-8b02b9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:10:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b60ac2a0-8d01-466c-b313-46ace81d826d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ec8ab7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b02b9","namespace":"ai-tenant-e2e-shared-a-ec8ab7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:10:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b60ac2a0-8d01-466c-b313-46ace81d826d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b60ac2a0-8d01-466c-b313-46ace81d826d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b60ac2a0-8d01-466c-b313-46ace81d826d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b60ac2a0-8d01-466c-b313-46ace81d826d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b60ac2a0-8d01-466c-b313-46ace81d826d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b60ac2a0-8d01-466c-b313-46ace81d826d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:10:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b60ac2a0-8d01-466c-b313-46ace81d826d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:10:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b60ac2a0-8d01-466c-b313-46ace81d826d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b02b9"}
{"level":"debug","ts":"2026-07-05T20:10:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b60ac2a0-8d01-466c-b313-46ace81d826d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"92f7bcba-6803-4e8f-9021-bf72b17b5bb2","keyName":"e2e-rate-a-8b02b9","selected_subscription":"e2e-rate-iso-a-8b02b9","selected_subscription_key":"ai-tenant-e2e-shared-a-ec8ab7/e2e-rate-iso-a-8b02b9@ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ec8ab7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b02b9","namespace":"ai-tenant-e2e-shared-a-ec8ab7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:10:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b60ac2a0-8d01-466c-b313-46ace81d826d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:10:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b60ac2a0-8d01-466c-b313-46ace81d826d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dd26abf-f9cb-4c00-92de-0cfe7b0f6976","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50064","PortSpecifier":{"PortValue":50064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4dd26abf-f9cb-4c00-92de-0cfe7b0f6976","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dd26abf-f9cb-4c00-92de-0cfe7b0f6976","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50064","PortSpecifier":{"PortValue":50064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282234,"nanos":271074454},"http":{"id":"4dd26abf-f9cb-4c00-92de-0cfe7b0f6976","method":"POST","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4dd26abf-f9cb-4c00-92de-0cfe7b0f6976","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4dd26abf-f9cb-4c00-92de-0cfe7b0f6976","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4dd26abf-f9cb-4c00-92de-0cfe7b0f6976","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dd26abf-f9cb-4c00-92de-0cfe7b0f6976","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dd26abf-f9cb-4c00-92de-0cfe7b0f6976","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dd26abf-f9cb-4c00-92de-0cfe7b0f6976","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4dd26abf-f9cb-4c00-92de-0cfe7b0f6976","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dd26abf-f9cb-4c00-92de-0cfe7b0f6976","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dd26abf-f9cb-4c00-92de-0cfe7b0f6976","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dd26abf-f9cb-4c00-92de-0cfe7b0f6976","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dd26abf-f9cb-4c00-92de-0cfe7b0f6976","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77e86e73-51ea-40b4-ab61-f5b957f95110","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40474","PortSpecifier":{"PortValue":40474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77e86e73-51ea-40b4-ab61-f5b957f95110","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77e86e73-51ea-40b4-ab61-f5b957f95110","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40474","PortSpecifier":{"PortValue":40474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282234,"nanos":308482318},"http":{"id":"77e86e73-51ea-40b4-ab61-f5b957f95110","method":"POST","headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"77e86e73-51ea-40b4-ab61-f5b957f95110","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77e86e73-51ea-40b4-ab61-f5b957f95110","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"]}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77e86e73-51ea-40b4-ab61-f5b957f95110","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b7db82bfc95e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d644b162-1514-493e-a976-dd318713fbf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"93a52060-8164-40be-bcdd-8760b6ffa7c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e86e73-51ea-40b4-ab61-f5b957f95110","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e86e73-51ea-40b4-ab61-f5b957f95110","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e86e73-51ea-40b4-ab61-f5b957f95110","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c11b28/rate-test-model-c11b28\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"77e86e73-51ea-40b4-ab61-f5b957f95110","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e86e73-51ea-40b4-ab61-f5b957f95110","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e86e73-51ea-40b4-ab61-f5b957f95110","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77e86e73-51ea-40b4-ab61-f5b957f95110","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77e86e73-51ea-40b4-ab61-f5b957f95110","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aea95de8-2198-4373-9ed6-8158428890bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50070","PortSpecifier":{"PortValue":50070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aea95de8-2198-4373-9ed6-8158428890bb","method":"POST","path":"/ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7/v1/completions","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aea95de8-2198-4373-9ed6-8158428890bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50070","PortSpecifier":{"PortValue":50070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282234,"nanos":348426933},"http":{"id":"aea95de8-2198-4373-9ed6-8158428890bb","method":"POST","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aea95de8-2198-4373-9ed6-8158428890bb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lVaOBtawKW57klgV_1adsRflx7J3FdpnfpEKBNonKriYPj3CnlhdzIPhBUSB"}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aea95de8-2198-4373-9ed6-8158428890bb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lVaOBtawKW57klgV_1adsRflx7J3FdpnfpEKBNonKriYPj3CnlhdzIPhBUSB\"}"}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aea95de8-2198-4373-9ed6-8158428890bb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5966274c-46cd-4804-88db-5deffa487a91","keyName":"e2e-rate-a-ed787d","subscription":"e2e-rate-iso-a-ed787d","tenant":"e2e-shared-a-ec8ab7","userId":"5966274c-46cd-4804-88db-5deffa487a91","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aea95de8-2198-4373-9ed6-8158428890bb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7\",\"requestedSubscription\":\"e2e-rate-iso-a-ed787d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aea95de8-2198-4373-9ed6-8158428890bb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ec8ab7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ed787d","namespace":"ai-tenant-e2e-shared-a-ec8ab7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aea95de8-2198-4373-9ed6-8158428890bb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aea95de8-2198-4373-9ed6-8158428890bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aea95de8-2198-4373-9ed6-8158428890bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aea95de8-2198-4373-9ed6-8158428890bb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aea95de8-2198-4373-9ed6-8158428890bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aea95de8-2198-4373-9ed6-8158428890bb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aea95de8-2198-4373-9ed6-8158428890bb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aea95de8-2198-4373-9ed6-8158428890bb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ed787d"}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aea95de8-2198-4373-9ed6-8158428890bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5966274c-46cd-4804-88db-5deffa487a91","keyName":"e2e-rate-a-ed787d","selected_subscription":"e2e-rate-iso-a-ed787d","selected_subscription_key":"ai-tenant-e2e-shared-a-ec8ab7/e2e-rate-iso-a-ed787d@ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ec8ab7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ed787d","namespace":"ai-tenant-e2e-shared-a-ec8ab7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aea95de8-2198-4373-9ed6-8158428890bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aea95de8-2198-4373-9ed6-8158428890bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:10:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbbf87c8-a29f-43fa-a33d-898e11f06038","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50076","PortSpecifier":{"PortValue":50076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bbbf87c8-a29f-43fa-a33d-898e11f06038","method":"POST","path":"/ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7/v1/completions","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:10:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbbf87c8-a29f-43fa-a33d-898e11f06038","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50076","PortSpecifier":{"PortValue":50076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282235,"nanos":380769919},"http":{"id":"bbbf87c8-a29f-43fa-a33d-898e11f06038","method":"POST","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bbbf87c8-a29f-43fa-a33d-898e11f06038","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lVaOBtawKW57klgV_1adsRflx7J3FdpnfpEKBNonKriYPj3CnlhdzIPhBUSB"}
{"level":"debug","ts":"2026-07-05T20:10:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bbbf87c8-a29f-43fa-a33d-898e11f06038","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lVaOBtawKW57klgV_1adsRflx7J3FdpnfpEKBNonKriYPj3CnlhdzIPhBUSB\"}"}
{"level":"debug","ts":"2026-07-05T20:10:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bbbf87c8-a29f-43fa-a33d-898e11f06038","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5966274c-46cd-4804-88db-5deffa487a91","keyName":"e2e-rate-a-ed787d","subscription":"e2e-rate-iso-a-ed787d","tenant":"e2e-shared-a-ec8ab7","userId":"5966274c-46cd-4804-88db-5deffa487a91","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:10:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bbbf87c8-a29f-43fa-a33d-898e11f06038","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7\",\"requestedSubscription\":\"e2e-rate-iso-a-ed787d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:10:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bbbf87c8-a29f-43fa-a33d-898e11f06038","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ec8ab7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ed787d","namespace":"ai-tenant-e2e-shared-a-ec8ab7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:10:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bbbf87c8-a29f-43fa-a33d-898e11f06038","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbbf87c8-a29f-43fa-a33d-898e11f06038","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbbf87c8-a29f-43fa-a33d-898e11f06038","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbbf87c8-a29f-43fa-a33d-898e11f06038","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbbf87c8-a29f-43fa-a33d-898e11f06038","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbbf87c8-a29f-43fa-a33d-898e11f06038","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:10:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbbf87c8-a29f-43fa-a33d-898e11f06038","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ed787d"}
{"level":"debug","ts":"2026-07-05T20:10:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbbf87c8-a29f-43fa-a33d-898e11f06038","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:10:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbbf87c8-a29f-43fa-a33d-898e11f06038","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5966274c-46cd-4804-88db-5deffa487a91","keyName":"e2e-rate-a-ed787d","selected_subscription":"e2e-rate-iso-a-ed787d","selected_subscription_key":"ai-tenant-e2e-shared-a-ec8ab7/e2e-rate-iso-a-ed787d@ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ec8ab7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ed787d","namespace":"ai-tenant-e2e-shared-a-ec8ab7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:10:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbbf87c8-a29f-43fa-a33d-898e11f06038","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:10:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbbf87c8-a29f-43fa-a33d-898e11f06038","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18fad93d-af2b-441e-9b3c-e13816228131","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51822","PortSpecifier":{"PortValue":51822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18fad93d-af2b-441e-9b3c-e13816228131","method":"POST","path":"/ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7/v1/completions","host":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18fad93d-af2b-441e-9b3c-e13816228131","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51822","PortSpecifier":{"PortValue":51822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282236,"nanos":416225055},"http":{"id":"18fad93d-af2b-441e-9b3c-e13816228131","method":"POST","headers":{":authority":"e2e-shared-a-ec8ab7.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18fad93d-af2b-441e-9b3c-e13816228131","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lVaOBtawKW57klgV_1adsRflx7J3FdpnfpEKBNonKriYPj3CnlhdzIPhBUSB"}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"18fad93d-af2b-441e-9b3c-e13816228131","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lVaOBtawKW57klgV_1adsRflx7J3FdpnfpEKBNonKriYPj3CnlhdzIPhBUSB\"}"}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"18fad93d-af2b-441e-9b3c-e13816228131","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5966274c-46cd-4804-88db-5deffa487a91","keyName":"e2e-rate-a-ed787d","subscription":"e2e-rate-iso-a-ed787d","tenant":"e2e-shared-a-ec8ab7","userId":"5966274c-46cd-4804-88db-5deffa487a91","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"18fad93d-af2b-441e-9b3c-e13816228131","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7\",\"requestedSubscription\":\"e2e-rate-iso-a-ed787d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"18fad93d-af2b-441e-9b3c-e13816228131","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ec8ab7.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ec8ab7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ed787d","namespace":"ai-tenant-e2e-shared-a-ec8ab7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18fad93d-af2b-441e-9b3c-e13816228131","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18fad93d-af2b-441e-9b3c-e13816228131","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18fad93d-af2b-441e-9b3c-e13816228131","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18fad93d-af2b-441e-9b3c-e13816228131","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18fad93d-af2b-441e-9b3c-e13816228131","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18fad93d-af2b-441e-9b3c-e13816228131","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ed787d"}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18fad93d-af2b-441e-9b3c-e13816228131","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18fad93d-af2b-441e-9b3c-e13816228131","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18fad93d-af2b-441e-9b3c-e13816228131","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5966274c-46cd-4804-88db-5deffa487a91","keyName":"e2e-rate-a-ed787d","selected_subscription":"e2e-rate-iso-a-ed787d","selected_subscription_key":"ai-tenant-e2e-shared-a-ec8ab7/e2e-rate-iso-a-ed787d@ai-tenant-e2e-shared-a-ec8ab7/rate-test-model-ec8ab7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ec8ab7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ed787d","namespace":"ai-tenant-e2e-shared-a-ec8ab7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18fad93d-af2b-441e-9b3c-e13816228131","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18fad93d-af2b-441e-9b3c-e13816228131","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1a3fc10-0032-45f4-90ec-ad8bc519b57c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56512","PortSpecifier":{"PortValue":56512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1a3fc10-0032-45f4-90ec-ad8bc519b57c","method":"POST","path":"/ai-tenant-e2e-shared-b-c11b28/rate-test-model-c11b28/v1/completions","host":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1a3fc10-0032-45f4-90ec-ad8bc519b57c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56512","PortSpecifier":{"PortValue":56512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282236,"nanos":450340630},"http":{"id":"b1a3fc10-0032-45f4-90ec-ad8bc519b57c","method":"POST","headers":{":authority":"e2e-shared-b-c11b28.apps.c7c00f6e-1375-448a-b8d8-b7db82bfc95e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-c11b28/rate-test-model-c11b28/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1a3fc10-0032-45f4-90ec-ad8bc519b57c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FoEFfHt8QqNrDUJS_WEbWKmbzIwBlf6U41Vr2Pe7SsbhCzVEl2uD6ctYx76X"}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b1a3fc10-0032-45f4-90ec-ad8bc519b57c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c11b28.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FoEFfHt8QqNrDUJS_WEbWKmbzIwBlf6U41Vr2Pe7SsbhCzVEl2uD6ctYx76X\"}"}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b1a3fc10-0032-45f4-90ec-ad8bc519b57c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c11b28.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9a3534c8-3baa-4a28-8085-d02ce488da79","keyName":"e2e-rate-b-ed787d","subscription":"e2e-rate-iso-b-ed787d","tenant":"e2e-shared-b-c11b28","userId":"9a3534c8-3baa-4a28-8085-d02ce488da79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b1a3fc10-0032-45f4-90ec-ad8bc519b57c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-c11b28.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-c11b28/rate-test-model-c11b28\",\"requestedSubscription\":\"e2e-rate-iso-b-ed787d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b1a3fc10-0032-45f4-90ec-ad8bc519b57c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c11b28.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c11b28","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ed787d","namespace":"ai-tenant-e2e-shared-b-c11b28","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1a3fc10-0032-45f4-90ec-ad8bc519b57c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1a3fc10-0032-45f4-90ec-ad8bc519b57c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1a3fc10-0032-45f4-90ec-ad8bc519b57c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1a3fc10-0032-45f4-90ec-ad8bc519b57c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1a3fc10-0032-45f4-90ec-ad8bc519b57c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c11b28/rate-test-model-c11b28\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1a3fc10-0032-45f4-90ec-ad8bc519b57c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1a3fc10-0032-45f4-90ec-ad8bc519b57c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-ed787d"}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1a3fc10-0032-45f4-90ec-ad8bc519b57c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1a3fc10-0032-45f4-90ec-ad8bc519b57c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9a3534c8-3baa-4a28-8085-d02ce488da79","keyName":"e2e-rate-b-ed787d","selected_subscription":"e2e-rate-iso-b-ed787d","selected_subscription_key":"ai-tenant-e2e-shared-b-c11b28/e2e-rate-iso-b-ed787d@ai-tenant-e2e-shared-b-c11b28/rate-test-model-c11b28","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c11b28","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ed787d","namespace":"ai-tenant-e2e-shared-b-c11b28","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1a3fc10-0032-45f4-90ec-ad8bc519b57c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1a3fc10-0032-45f4-90ec-ad8bc519b57c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:10:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c3aacf58b60cfd820616162407fd7b70a8d5f421baa4fc8e8aacf3bbc83a036"}
{"level":"info","ts":"2026-07-05T20:10:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9911c1d42ecd07603514301f9ecd65978ae9e0cb1fe5d7ba941c5a9f0297e402"}
{"level":"info","ts":"2026-07-05T20:10:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbd6272b092c7a9f4a96f786aaf980711440487cea52103f993dcc735c3ca176"}
{"level":"info","ts":"2026-07-05T20:10:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ce43141634e905146aa29eef1b57649710988e0a8329f8129b1d1c6fcf1dfc7"}
{"level":"info","ts":"2026-07-05T20:10:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9e1a47c06eb4ad99a6daa7451cf8e8fecdff38a7e4a5aef59bb689cadf1dceb"}
{"level":"info","ts":"2026-07-05T20:10:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f0271b8acb51ac4ff7c45c0484e676fb0e5d9f0e196fb121b6bb9be6e02e72f"}
{"level":"info","ts":"2026-07-05T20:10:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0a6a9eca2ae5bbd086c3c9de8435cb8f1ac8350c6bcd1c75c29824f5573b5a8"}
{"level":"info","ts":"2026-07-05T20:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2efa17e28fbccd29a76c74fede110dc07c3f74e113234f7eec49de3cfa911033"}
{"level":"info","ts":"2026-07-05T20:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a94826cbcb1e33bdba61716100b1982c129723025566a433bcdfb76ebf9e54c0"}
{"level":"info","ts":"2026-07-05T20:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b60fdf9a128062de8dea3dca4c9bd3e211128c1d5c2e88cce173a44c4e5a4169"}
{"level":"info","ts":"2026-07-05T20:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32fd600038574d207dbf64eba6fbf54134d1398ac81e5a9ba605a0faffc24274"}
{"level":"info","ts":"2026-07-05T20:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77acf351e0d9dc0a68057e2c06eaad80f3fce43015da3323d1545e31eebe2382"}
{"level":"info","ts":"2026-07-05T20:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b00ce34db7584e1cc785bb6cf7a2645375633e8fda1b5b5db24d16b4e14d684b"}
{"level":"info","ts":"2026-07-05T20:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1cb8fdd1d84eae74db39e1684c18c1db04a50b8c97e5a28afdf9e1732100ef87"}
{"level":"info","ts":"2026-07-05T20:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f185fdbd92cf1d19c554e4b506ab29b66d66e35110ffcfb942d351c3a2d7e86"}
{"level":"info","ts":"2026-07-05T20:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38b0ff0f4f0e2f62d8b27cfe8fcec66a06d358e49883a4b89a28617b00513145"}
{"level":"info","ts":"2026-07-05T20:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/099c2af884b8ce3b2978545a646ca22c749c7b34d693748b3034e7d2104780c6"}
{"level":"info","ts":"2026-07-05T20:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03c7b9325f3a761d6a3b87cfe67c4887130e791d7f4f16dbbca59f384d28f08c"}
{"level":"info","ts":"2026-07-05T20:11:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff3b4fed556234eca5da30bd466609e9e1c5f4bf7712baae587a495193bdb4bc"}
{"level":"info","ts":"2026-07-05T20:11:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08fc402c444cc7bff77a72f55746891817a028841841626a1bd0c4b110c0f27c"}