--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-09T19:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a91e875a98c227504ee442e6cc7da2bc3ddae16198dd13a30fa67d2c40c008f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a91e875a98c227504ee442e6cc7da2bc3ddae16198dd13a30fa67d2c40c008f"}
{"level":"debug","ts":"2026-07-09T19:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a91e875a98c227504ee442e6cc7da2bc3ddae16198dd13a30fa67d2c40c008f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a91e875a98c227504ee442e6cc7da2bc3ddae16198dd13a30fa67d2c40c008f"}
{"level":"debug","ts":"2026-07-09T19:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a91e875a98c227504ee442e6cc7da2bc3ddae16198dd13a30fa67d2c40c008f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:26:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:26:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a91e875a98c227504ee442e6cc7da2bc3ddae16198dd13a30fa67d2c40c008f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a91e875a98c227504ee442e6cc7da2bc3ddae16198dd13a30fa67d2c40c008f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a91e875a98c227504ee442e6cc7da2bc3ddae16198dd13a30fa67d2c40c008f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:26:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:26:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a91e875a98c227504ee442e6cc7da2bc3ddae16198dd13a30fa67d2c40c008f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a91e875a98c227504ee442e6cc7da2bc3ddae16198dd13a30fa67d2c40c008f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a91e875a98c227504ee442e6cc7da2bc3ddae16198dd13a30fa67d2c40c008f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a91e875a98c227504ee442e6cc7da2bc3ddae16198dd13a30fa67d2c40c008f"}
{"level":"debug","ts":"2026-07-09T19:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a91e875a98c227504ee442e6cc7da2bc3ddae16198dd13a30fa67d2c40c008f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a91e875a98c227504ee442e6cc7da2bc3ddae16198dd13a30fa67d2c40c008f"}
{"level":"debug","ts":"2026-07-09T19:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a91e875a98c227504ee442e6cc7da2bc3ddae16198dd13a30fa67d2c40c008f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:26:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:26:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a91e875a98c227504ee442e6cc7da2bc3ddae16198dd13a30fa67d2c40c008f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a91e875a98c227504ee442e6cc7da2bc3ddae16198dd13a30fa67d2c40c008f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a91e875a98c227504ee442e6cc7da2bc3ddae16198dd13a30fa67d2c40c008f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a91e875a98c227504ee442e6cc7da2bc3ddae16198dd13a30fa67d2c40c008f"}
{"level":"info","ts":"2026-07-09T19:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f72fd5ddd65ffaa8400cfd60718604fd07bd0964e45b92154d6ac0379778d76"}
{"level":"info","ts":"2026-07-09T19:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5a7b90fe342deda90642adf736bcbe780909736fc218b6647ffe03d484b012d"}
{"level":"info","ts":"2026-07-09T19:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a91e875a98c227504ee442e6cc7da2bc3ddae16198dd13a30fa67d2c40c008f"}
{"level":"info","ts":"2026-07-09T19:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8886a3e0e96d529754817be3e8465628474098bcc68b132e6b129658909b7a47"}
{"level":"info","ts":"2026-07-09T19:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8894a22acdee2c4869e0bac08f2c03021f11cd4d0eb69b929d63e1d11d2a12a"}
{"level":"info","ts":"2026-07-09T19:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a56665926bff0367c2fb85f3bb10f38350985a1db636faf7b091ddae0d72192"}
{"level":"info","ts":"2026-07-09T19:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d196917e19e8e98d77518b28d616e07cb88bbb94b80e83fcdd3ac5b6e57a5cb6"}
{"level":"info","ts":"2026-07-09T19:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b12a4f58dd59b5cbd545231aa8433058aaefc45b653266423090638a67fbc95"}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a"}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a"}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"606f5c1b92e086a4ce7a3fbd16f540a7dd343ae9dc74f7be83680eb1e1929f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a"}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"606f5c1b92e086a4ce7a3fbd16f540a7dd343ae9dc74f7be83680eb1e1929f1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"606f5c1b92e086a4ce7a3fbd16f540a7dd343ae9dc74f7be83680eb1e1929f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/606f5c1b92e086a4ce7a3fbd16f540a7dd343ae9dc74f7be83680eb1e1929f1b"}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"606f5c1b92e086a4ce7a3fbd16f540a7dd343ae9dc74f7be83680eb1e1929f1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a"}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"606f5c1b92e086a4ce7a3fbd16f540a7dd343ae9dc74f7be83680eb1e1929f1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/606f5c1b92e086a4ce7a3fbd16f540a7dd343ae9dc74f7be83680eb1e1929f1b"}
{"level":"error","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"606f5c1b92e086a4ce7a3fbd16f540a7dd343ae9dc74f7be83680eb1e1929f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["606f5c1b92e086a4ce7a3fbd16f540a7dd343ae9dc74f7be83680eb1e1929f1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a"}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"606f5c1b92e086a4ce7a3fbd16f540a7dd343ae9dc74f7be83680eb1e1929f1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"606f5c1b92e086a4ce7a3fbd16f540a7dd343ae9dc74f7be83680eb1e1929f1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a"}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/606f5c1b92e086a4ce7a3fbd16f540a7dd343ae9dc74f7be83680eb1e1929f1b"}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a"}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"}
{"level":"info","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"}
{"level":"debug","ts":"2026-07-09T19:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0493d5c6240f0dcdfe1af1a0bdb75368291cee24c4cd5ad48a736022fa28d964","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0493d5c6240f0dcdfe1af1a0bdb75368291cee24c4cd5ad48a736022fa28d964","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0493d5c6240f0dcdfe1af1a0bdb75368291cee24c4cd5ad48a736022fa28d964","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0493d5c6240f0dcdfe1af1a0bdb75368291cee24c4cd5ad48a736022fa28d964","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0493d5c6240f0dcdfe1af1a0bdb75368291cee24c4cd5ad48a736022fa28d964"}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0493d5c6240f0dcdfe1af1a0bdb75368291cee24c4cd5ad48a736022fa28d964","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0493d5c6240f0dcdfe1af1a0bdb75368291cee24c4cd5ad48a736022fa28d964"}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0493d5c6240f0dcdfe1af1a0bdb75368291cee24c4cd5ad48a736022fa28d964","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0493d5c6240f0dcdfe1af1a0bdb75368291cee24c4cd5ad48a736022fa28d964"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0493d5c6240f0dcdfe1af1a0bdb75368291cee24c4cd5ad48a736022fa28d964","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b063c4eb8ceb74b871cc7129cb432ae48bd9e78554f1d6ccfd0f8bc4499c8716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b063c4eb8ceb74b871cc7129cb432ae48bd9e78554f1d6ccfd0f8bc4499c8716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0493d5c6240f0dcdfe1af1a0bdb75368291cee24c4cd5ad48a736022fa28d964","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b063c4eb8ceb74b871cc7129cb432ae48bd9e78554f1d6ccfd0f8bc4499c8716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b063c4eb8ceb74b871cc7129cb432ae48bd9e78554f1d6ccfd0f8bc4499c8716"}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b063c4eb8ceb74b871cc7129cb432ae48bd9e78554f1d6ccfd0f8bc4499c8716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b063c4eb8ceb74b871cc7129cb432ae48bd9e78554f1d6ccfd0f8bc4499c8716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b063c4eb8ceb74b871cc7129cb432ae48bd9e78554f1d6ccfd0f8bc4499c8716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b063c4eb8ceb74b871cc7129cb432ae48bd9e78554f1d6ccfd0f8bc4499c8716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0493d5c6240f0dcdfe1af1a0bdb75368291cee24c4cd5ad48a736022fa28d964"}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b063c4eb8ceb74b871cc7129cb432ae48bd9e78554f1d6ccfd0f8bc4499c8716"}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468"}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468"}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6ca3b3137672cadee69edb44c99d30c20e7bde5dfb72d638785662879d9efb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6ca3b3137672cadee69edb44c99d30c20e7bde5dfb72d638785662879d9efb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6ca3b3137672cadee69edb44c99d30c20e7bde5dfb72d638785662879d9efb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6ca3b3137672cadee69edb44c99d30c20e7bde5dfb72d638785662879d9efb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468"}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6ca3b3137672cadee69edb44c99d30c20e7bde5dfb72d638785662879d9efb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6ca3b3137672cadee69edb44c99d30c20e7bde5dfb72d638785662879d9efb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6ca3b3137672cadee69edb44c99d30c20e7bde5dfb72d638785662879d9efb"}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6ca3b3137672cadee69edb44c99d30c20e7bde5dfb72d638785662879d9efb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6ca3b3137672cadee69edb44c99d30c20e7bde5dfb72d638785662879d9efb"}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6ca3b3137672cadee69edb44c99d30c20e7bde5dfb72d638785662879d9efb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a6ca3b3137672cadee69edb44c99d30c20e7bde5dfb72d638785662879d9efb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468"}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6ca3b3137672cadee69edb44c99d30c20e7bde5dfb72d638785662879d9efb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5eb2a9d3813086de86f6c30c5038293777cbaf6917e2c07daf90c0b1cb94651","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5eb2a9d3813086de86f6c30c5038293777cbaf6917e2c07daf90c0b1cb94651","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6ca3b3137672cadee69edb44c99d30c20e7bde5dfb72d638785662879d9efb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5eb2a9d3813086de86f6c30c5038293777cbaf6917e2c07daf90c0b1cb94651","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5eb2a9d3813086de86f6c30c5038293777cbaf6917e2c07daf90c0b1cb94651"}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5eb2a9d3813086de86f6c30c5038293777cbaf6917e2c07daf90c0b1cb94651","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5eb2a9d3813086de86f6c30c5038293777cbaf6917e2c07daf90c0b1cb94651"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5eb2a9d3813086de86f6c30c5038293777cbaf6917e2c07daf90c0b1cb94651","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5eb2a9d3813086de86f6c30c5038293777cbaf6917e2c07daf90c0b1cb94651","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6ca3b3137672cadee69edb44c99d30c20e7bde5dfb72d638785662879d9efb"}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5eb2a9d3813086de86f6c30c5038293777cbaf6917e2c07daf90c0b1cb94651"}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72482e77d111d05b655b4ec7afbedfed1e15cb61aab9232da0d47de40063eed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72482e77d111d05b655b4ec7afbedfed1e15cb61aab9232da0d47de40063eed7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72482e77d111d05b655b4ec7afbedfed1e15cb61aab9232da0d47de40063eed7"}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72482e77d111d05b655b4ec7afbedfed1e15cb61aab9232da0d47de40063eed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72482e77d111d05b655b4ec7afbedfed1e15cb61aab9232da0d47de40063eed7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72482e77d111d05b655b4ec7afbedfed1e15cb61aab9232da0d47de40063eed7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b"}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72482e77d111d05b655b4ec7afbedfed1e15cb61aab9232da0d47de40063eed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72482e77d111d05b655b4ec7afbedfed1e15cb61aab9232da0d47de40063eed7"}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72482e77d111d05b655b4ec7afbedfed1e15cb61aab9232da0d47de40063eed7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b"}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72482e77d111d05b655b4ec7afbedfed1e15cb61aab9232da0d47de40063eed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72482e77d111d05b655b4ec7afbedfed1e15cb61aab9232da0d47de40063eed7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b"}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72482e77d111d05b655b4ec7afbedfed1e15cb61aab9232da0d47de40063eed7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72482e77d111d05b655b4ec7afbedfed1e15cb61aab9232da0d47de40063eed7"}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72482e77d111d05b655b4ec7afbedfed1e15cb61aab9232da0d47de40063eed7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b"}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b"}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72482e77d111d05b655b4ec7afbedfed1e15cb61aab9232da0d47de40063eed7"}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b"}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b"}
{"level":"info","ts":"2026-07-09T19:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b"}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"}
{"level":"error","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"}
{"level":"error","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0afaafc7a3ecf3e27c29f50b592ac33232369ab7599f64c4e74e808676412aa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0afaafc7a3ecf3e27c29f50b592ac33232369ab7599f64c4e74e808676412aa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0afaafc7a3ecf3e27c29f50b592ac33232369ab7599f64c4e74e808676412aa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0afaafc7a3ecf3e27c29f50b592ac33232369ab7599f64c4e74e808676412aa9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0afaafc7a3ecf3e27c29f50b592ac33232369ab7599f64c4e74e808676412aa9"}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0afaafc7a3ecf3e27c29f50b592ac33232369ab7599f64c4e74e808676412aa9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0afaafc7a3ecf3e27c29f50b592ac33232369ab7599f64c4e74e808676412aa9"}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0afaafc7a3ecf3e27c29f50b592ac33232369ab7599f64c4e74e808676412aa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0afaafc7a3ecf3e27c29f50b592ac33232369ab7599f64c4e74e808676412aa9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0afaafc7a3ecf3e27c29f50b592ac33232369ab7599f64c4e74e808676412aa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0afaafc7a3ecf3e27c29f50b592ac33232369ab7599f64c4e74e808676412aa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0afaafc7a3ecf3e27c29f50b592ac33232369ab7599f64c4e74e808676412aa9"}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2"}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2"}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2"}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2"}
{"level":"debug","ts":"2026-07-09T19:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2"}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7"}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7"}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deae03474d883b87b305434d7dbacc7f28926736bce71bf0c252a6d2de0c1b43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deae03474d883b87b305434d7dbacc7f28926736bce71bf0c252a6d2de0c1b43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deae03474d883b87b305434d7dbacc7f28926736bce71bf0c252a6d2de0c1b43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deae03474d883b87b305434d7dbacc7f28926736bce71bf0c252a6d2de0c1b43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deae03474d883b87b305434d7dbacc7f28926736bce71bf0c252a6d2de0c1b43"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deae03474d883b87b305434d7dbacc7f28926736bce71bf0c252a6d2de0c1b43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["deae03474d883b87b305434d7dbacc7f28926736bce71bf0c252a6d2de0c1b43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deae03474d883b87b305434d7dbacc7f28926736bce71bf0c252a6d2de0c1b43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deae03474d883b87b305434d7dbacc7f28926736bce71bf0c252a6d2de0c1b43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122"}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16b5ad201a5eccfc0040cbc89dfca5f2b59b505e4ad9b61cb622b49f8776b11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16b5ad201a5eccfc0040cbc89dfca5f2b59b505e4ad9b61cb622b49f8776b11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deae03474d883b87b305434d7dbacc7f28926736bce71bf0c252a6d2de0c1b43"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c16b5ad201a5eccfc0040cbc89dfca5f2b59b505e4ad9b61cb622b49f8776b11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16b5ad201a5eccfc0040cbc89dfca5f2b59b505e4ad9b61cb622b49f8776b11"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16b5ad201a5eccfc0040cbc89dfca5f2b59b505e4ad9b61cb622b49f8776b11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c16b5ad201a5eccfc0040cbc89dfca5f2b59b505e4ad9b61cb622b49f8776b11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16b5ad201a5eccfc0040cbc89dfca5f2b59b505e4ad9b61cb622b49f8776b11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c16b5ad201a5eccfc0040cbc89dfca5f2b59b505e4ad9b61cb622b49f8776b11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122"}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16b5ad201a5eccfc0040cbc89dfca5f2b59b505e4ad9b61cb622b49f8776b11"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ce4b07a8add2d2d2c59ceb8d9bd4b8bf63e828f449276c0888675ace01aebfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ce4b07a8add2d2d2c59ceb8d9bd4b8bf63e828f449276c0888675ace01aebfe"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ce4b07a8add2d2d2c59ceb8d9bd4b8bf63e828f449276c0888675ace01aebfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3772f9d68108043c55dbfec77af739b67027b5460d9f36040d55c0c194479e45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3772f9d68108043c55dbfec77af739b67027b5460d9f36040d55c0c194479e45"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3772f9d68108043c55dbfec77af739b67027b5460d9f36040d55c0c194479e45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ce4b07a8add2d2d2c59ceb8d9bd4b8bf63e828f449276c0888675ace01aebfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ce4b07a8add2d2d2c59ceb8d9bd4b8bf63e828f449276c0888675ace01aebfe"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3772f9d68108043c55dbfec77af739b67027b5460d9f36040d55c0c194479e45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3772f9d68108043c55dbfec77af739b67027b5460d9f36040d55c0c194479e45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3772f9d68108043c55dbfec77af739b67027b5460d9f36040d55c0c194479e45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f6b78f136a0341842075719f512ab32c36ff5f435da94858be9a98ca01305bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f6b78f136a0341842075719f512ab32c36ff5f435da94858be9a98ca01305bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ce4b07a8add2d2d2c59ceb8d9bd4b8bf63e828f449276c0888675ace01aebfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ce4b07a8add2d2d2c59ceb8d9bd4b8bf63e828f449276c0888675ace01aebfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ce4b07a8add2d2d2c59ceb8d9bd4b8bf63e828f449276c0888675ace01aebfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3772f9d68108043c55dbfec77af739b67027b5460d9f36040d55c0c194479e45"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3772f9d68108043c55dbfec77af739b67027b5460d9f36040d55c0c194479e45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f6b78f136a0341842075719f512ab32c36ff5f435da94858be9a98ca01305bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f6b78f136a0341842075719f512ab32c36ff5f435da94858be9a98ca01305bd"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f6b78f136a0341842075719f512ab32c36ff5f435da94858be9a98ca01305bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ce4b07a8add2d2d2c59ceb8d9bd4b8bf63e828f449276c0888675ace01aebfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f6b78f136a0341842075719f512ab32c36ff5f435da94858be9a98ca01305bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f6b78f136a0341842075719f512ab32c36ff5f435da94858be9a98ca01305bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ce4b07a8add2d2d2c59ceb8d9bd4b8bf63e828f449276c0888675ace01aebfe"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f6b78f136a0341842075719f512ab32c36ff5f435da94858be9a98ca01305bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f6b78f136a0341842075719f512ab32c36ff5f435da94858be9a98ca01305bd"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f6b78f136a0341842075719f512ab32c36ff5f435da94858be9a98ca01305bd"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f6b78f136a0341842075719f512ab32c36ff5f435da94858be9a98ca01305bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279"}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279"}
{"level":"error","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31c2923d-932b-40ea-85de-9cb48eb02125","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:46942","PortSpecifier":{"PortValue":46942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31c2923d-932b-40ea-85de-9cb48eb02125","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31c2923d-932b-40ea-85de-9cb48eb02125","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:46942","PortSpecifier":{"PortValue":46942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625330,"nanos":19399246},"http":{"id":"31c2923d-932b-40ea-85de-9cb48eb02125","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"31c2923d-932b-40ea-85de-9cb48eb02125","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31c2923d-932b-40ea-85de-9cb48eb02125","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31c2923d-932b-40ea-85de-9cb48eb02125","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c2923d-932b-40ea-85de-9cb48eb02125","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c2923d-932b-40ea-85de-9cb48eb02125","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c2923d-932b-40ea-85de-9cb48eb02125","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/auth-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"31c2923d-932b-40ea-85de-9cb48eb02125","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31c2923d-932b-40ea-85de-9cb48eb02125","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31c2923d-932b-40ea-85de-9cb48eb02125","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31c2923d-932b-40ea-85de-9cb48eb02125","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31c2923d-932b-40ea-85de-9cb48eb02125","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ed4aa47-0e24-4d98-a752-906627c0ecf1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42434","PortSpecifier":{"PortValue":42434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ed4aa47-0e24-4d98-a752-906627c0ecf1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ed4aa47-0e24-4d98-a752-906627c0ecf1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42434","PortSpecifier":{"PortValue":42434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625330,"nanos":91489525},"http":{"id":"5ed4aa47-0e24-4d98-a752-906627c0ecf1","method":"POST","headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5ed4aa47-0e24-4d98-a752-906627c0ecf1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ed4aa47-0e24-4d98-a752-906627c0ecf1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ed4aa47-0e24-4d98-a752-906627c0ecf1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ed4aa47-0e24-4d98-a752-906627c0ecf1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ed4aa47-0e24-4d98-a752-906627c0ecf1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ed4aa47-0e24-4d98-a752-906627c0ecf1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b20a51/auth-test-model-b20a51\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ed4aa47-0e24-4d98-a752-906627c0ecf1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ed4aa47-0e24-4d98-a752-906627c0ecf1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ed4aa47-0e24-4d98-a752-906627c0ecf1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ed4aa47-0e24-4d98-a752-906627c0ecf1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ed4aa47-0e24-4d98-a752-906627c0ecf1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd51f6ec-f328-41ce-80b8-31e939a115f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:46954","PortSpecifier":{"PortValue":46954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd51f6ec-f328-41ce-80b8-31e939a115f1","method":"GET","path":"/maas-api/v1/api-keys/3d1717fe-06ee-45dc-981e-0360a1bcbbbc","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd51f6ec-f328-41ce-80b8-31e939a115f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:46954","PortSpecifier":{"PortValue":46954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625330,"nanos":157315039},"http":{"id":"fd51f6ec-f328-41ce-80b8-31e939a115f1","method":"GET","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3d1717fe-06ee-45dc-981e-0360a1bcbbbc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd51f6ec-f328-41ce-80b8-31e939a115f1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd51f6ec-f328-41ce-80b8-31e939a115f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd51f6ec-f328-41ce-80b8-31e939a115f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3d1717fe-06ee-45dc-981e-0360a1bcbbbc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd51f6ec-f328-41ce-80b8-31e939a115f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd51f6ec-f328-41ce-80b8-31e939a115f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd51f6ec-f328-41ce-80b8-31e939a115f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/auth-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd51f6ec-f328-41ce-80b8-31e939a115f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd51f6ec-f328-41ce-80b8-31e939a115f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd51f6ec-f328-41ce-80b8-31e939a115f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd51f6ec-f328-41ce-80b8-31e939a115f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd51f6ec-f328-41ce-80b8-31e939a115f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6808655-110d-41c9-adf1-79cbbad61667","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42436","PortSpecifier":{"PortValue":42436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6808655-110d-41c9-adf1-79cbbad61667","method":"GET","path":"/maas-api/v1/api-keys/7d4d28e9-b7d7-42f8-86fb-f029774b296a","host":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6808655-110d-41c9-adf1-79cbbad61667","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42436","PortSpecifier":{"PortValue":42436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625330,"nanos":201838557},"http":{"id":"a6808655-110d-41c9-adf1-79cbbad61667","method":"GET","headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7d4d28e9-b7d7-42f8-86fb-f029774b296a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a6808655-110d-41c9-adf1-79cbbad61667","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6808655-110d-41c9-adf1-79cbbad61667","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6808655-110d-41c9-adf1-79cbbad61667","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7d4d28e9-b7d7-42f8-86fb-f029774b296a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6808655-110d-41c9-adf1-79cbbad61667","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6808655-110d-41c9-adf1-79cbbad61667","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6808655-110d-41c9-adf1-79cbbad61667","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b20a51/auth-test-model-b20a51\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a6808655-110d-41c9-adf1-79cbbad61667","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6808655-110d-41c9-adf1-79cbbad61667","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6808655-110d-41c9-adf1-79cbbad61667","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6808655-110d-41c9-adf1-79cbbad61667","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6808655-110d-41c9-adf1-79cbbad61667","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"682651ea-f719-4260-be8d-a0c42dab97e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:36606","PortSpecifier":{"PortValue":36606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"682651ea-f719-4260-be8d-a0c42dab97e5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"682651ea-f719-4260-be8d-a0c42dab97e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:36606","PortSpecifier":{"PortValue":36606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625349,"nanos":487215420},"http":{"id":"682651ea-f719-4260-be8d-a0c42dab97e5","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"682651ea-f719-4260-be8d-a0c42dab97e5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"682651ea-f719-4260-be8d-a0c42dab97e5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"682651ea-f719-4260-be8d-a0c42dab97e5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"682651ea-f719-4260-be8d-a0c42dab97e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"682651ea-f719-4260-be8d-a0c42dab97e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"682651ea-f719-4260-be8d-a0c42dab97e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/auth-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"682651ea-f719-4260-be8d-a0c42dab97e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"682651ea-f719-4260-be8d-a0c42dab97e5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"682651ea-f719-4260-be8d-a0c42dab97e5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"682651ea-f719-4260-be8d-a0c42dab97e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"682651ea-f719-4260-be8d-a0c42dab97e5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e24edd5-d18e-4e93-8a31-323e00e1bddb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57296","PortSpecifier":{"PortValue":57296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e24edd5-d18e-4e93-8a31-323e00e1bddb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e24edd5-d18e-4e93-8a31-323e00e1bddb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57296","PortSpecifier":{"PortValue":57296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625349,"nanos":527684100},"http":{"id":"9e24edd5-d18e-4e93-8a31-323e00e1bddb","method":"POST","headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9e24edd5-d18e-4e93-8a31-323e00e1bddb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e24edd5-d18e-4e93-8a31-323e00e1bddb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e24edd5-d18e-4e93-8a31-323e00e1bddb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e24edd5-d18e-4e93-8a31-323e00e1bddb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e24edd5-d18e-4e93-8a31-323e00e1bddb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e24edd5-d18e-4e93-8a31-323e00e1bddb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b20a51/auth-test-model-b20a51\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e24edd5-d18e-4e93-8a31-323e00e1bddb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e24edd5-d18e-4e93-8a31-323e00e1bddb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e24edd5-d18e-4e93-8a31-323e00e1bddb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e24edd5-d18e-4e93-8a31-323e00e1bddb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e24edd5-d18e-4e93-8a31-323e00e1bddb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13bf1dd2-eca6-4b20-a7fe-cfa9e16a5b3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:36622","PortSpecifier":{"PortValue":36622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13bf1dd2-eca6-4b20-a7fe-cfa9e16a5b3e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13bf1dd2-eca6-4b20-a7fe-cfa9e16a5b3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:36622","PortSpecifier":{"PortValue":36622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625349,"nanos":568954406},"http":{"id":"13bf1dd2-eca6-4b20-a7fe-cfa9e16a5b3e","method":"GET","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13bf1dd2-eca6-4b20-a7fe-cfa9e16a5b3e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wt13psEXgtFo4fja_d6vrIZVAY4ac7T97UZzqlkkW2cJGGqXAgGxbumOu4Dv"}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13bf1dd2-eca6-4b20-a7fe-cfa9e16a5b3e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wt13psEXgtFo4fja_d6vrIZVAY4ac7T97UZzqlkkW2cJGGqXAgGxbumOu4Dv\"}"}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13bf1dd2-eca6-4b20-a7fe-cfa9e16a5b3e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"514feee0-c0e0-47ce-bad2-0bed36979f8d","keyName":"e2e-auth-iso-a-bf0520","subscription":"e2e-auth-iso-229485","tenant":"e2e-shared-a-5d8f8f","userId":"514feee0-c0e0-47ce-bad2-0bed36979f8d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13bf1dd2-eca6-4b20-a7fe-cfa9e16a5b3e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13bf1dd2-eca6-4b20-a7fe-cfa9e16a5b3e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13bf1dd2-eca6-4b20-a7fe-cfa9e16a5b3e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13bf1dd2-eca6-4b20-a7fe-cfa9e16a5b3e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/auth-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13bf1dd2-eca6-4b20-a7fe-cfa9e16a5b3e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-229485"}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13bf1dd2-eca6-4b20-a7fe-cfa9e16a5b3e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13bf1dd2-eca6-4b20-a7fe-cfa9e16a5b3e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"13bf1dd2-eca6-4b20-a7fe-cfa9e16a5b3e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13bf1dd2-eca6-4b20-a7fe-cfa9e16a5b3e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:29:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13bf1dd2-eca6-4b20-a7fe-cfa9e16a5b3e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d5aa75a-7a9e-49f6-9000-770b2387efc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52658","PortSpecifier":{"PortValue":52658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d5aa75a-7a9e-49f6-9000-770b2387efc0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d5aa75a-7a9e-49f6-9000-770b2387efc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52658","PortSpecifier":{"PortValue":52658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625366,"nanos":765122867},"http":{"id":"2d5aa75a-7a9e-49f6-9000-770b2387efc0","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d5aa75a-7a9e-49f6-9000-770b2387efc0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d5aa75a-7a9e-49f6-9000-770b2387efc0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d5aa75a-7a9e-49f6-9000-770b2387efc0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d5aa75a-7a9e-49f6-9000-770b2387efc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d5aa75a-7a9e-49f6-9000-770b2387efc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d5aa75a-7a9e-49f6-9000-770b2387efc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/auth-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d5aa75a-7a9e-49f6-9000-770b2387efc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d5aa75a-7a9e-49f6-9000-770b2387efc0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d5aa75a-7a9e-49f6-9000-770b2387efc0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d5aa75a-7a9e-49f6-9000-770b2387efc0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d5aa75a-7a9e-49f6-9000-770b2387efc0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31805b54-4564-4598-ab86-aef3c4863fbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:46960","PortSpecifier":{"PortValue":46960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31805b54-4564-4598-ab86-aef3c4863fbc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31805b54-4564-4598-ab86-aef3c4863fbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:46960","PortSpecifier":{"PortValue":46960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625366,"nanos":806335144},"http":{"id":"31805b54-4564-4598-ab86-aef3c4863fbc","method":"POST","headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"31805b54-4564-4598-ab86-aef3c4863fbc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31805b54-4564-4598-ab86-aef3c4863fbc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31805b54-4564-4598-ab86-aef3c4863fbc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31805b54-4564-4598-ab86-aef3c4863fbc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31805b54-4564-4598-ab86-aef3c4863fbc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b20a51/auth-test-model-b20a51\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31805b54-4564-4598-ab86-aef3c4863fbc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"31805b54-4564-4598-ab86-aef3c4863fbc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31805b54-4564-4598-ab86-aef3c4863fbc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31805b54-4564-4598-ab86-aef3c4863fbc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31805b54-4564-4598-ab86-aef3c4863fbc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31805b54-4564-4598-ab86-aef3c4863fbc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6249f333-f291-4386-97c5-798130b7a37d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:46966","PortSpecifier":{"PortValue":46966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6249f333-f291-4386-97c5-798130b7a37d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6249f333-f291-4386-97c5-798130b7a37d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:46966","PortSpecifier":{"PortValue":46966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625366,"nanos":851634104},"http":{"id":"6249f333-f291-4386-97c5-798130b7a37d","method":"GET","headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6249f333-f291-4386-97c5-798130b7a37d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Rjj30W8I3AeJ7Ge3_FulumXmGKK6EGHubQHCFC26kCY9A6HP6xdxIHepxRwp"}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6249f333-f291-4386-97c5-798130b7a37d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b20a51.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Rjj30W8I3AeJ7Ge3_FulumXmGKK6EGHubQHCFC26kCY9A6HP6xdxIHepxRwp\"}"}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6249f333-f291-4386-97c5-798130b7a37d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b20a51.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6249f333-f291-4386-97c5-798130b7a37d","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6249f333-f291-4386-97c5-798130b7a37d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"6249f333-f291-4386-97c5-798130b7a37d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6249f333-f291-4386-97c5-798130b7a37d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-09T19:29:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6249f333-f291-4386-97c5-798130b7a37d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dd2611d-4890-4115-812d-7b6bf2b9d2db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52528","PortSpecifier":{"PortValue":52528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8dd2611d-4890-4115-812d-7b6bf2b9d2db","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dd2611d-4890-4115-812d-7b6bf2b9d2db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52528","PortSpecifier":{"PortValue":52528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625386,"nanos":120815495},"http":{"id":"8dd2611d-4890-4115-812d-7b6bf2b9d2db","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8dd2611d-4890-4115-812d-7b6bf2b9d2db","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8dd2611d-4890-4115-812d-7b6bf2b9d2db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8dd2611d-4890-4115-812d-7b6bf2b9d2db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dd2611d-4890-4115-812d-7b6bf2b9d2db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dd2611d-4890-4115-812d-7b6bf2b9d2db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dd2611d-4890-4115-812d-7b6bf2b9d2db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/auth-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8dd2611d-4890-4115-812d-7b6bf2b9d2db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dd2611d-4890-4115-812d-7b6bf2b9d2db","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dd2611d-4890-4115-812d-7b6bf2b9d2db","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dd2611d-4890-4115-812d-7b6bf2b9d2db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dd2611d-4890-4115-812d-7b6bf2b9d2db","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11b6cd9d-a971-46e6-8ebb-096de7728e58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54922","PortSpecifier":{"PortValue":54922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11b6cd9d-a971-46e6-8ebb-096de7728e58","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11b6cd9d-a971-46e6-8ebb-096de7728e58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54922","PortSpecifier":{"PortValue":54922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625386,"nanos":166839530},"http":{"id":"11b6cd9d-a971-46e6-8ebb-096de7728e58","method":"POST","headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"11b6cd9d-a971-46e6-8ebb-096de7728e58","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11b6cd9d-a971-46e6-8ebb-096de7728e58","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11b6cd9d-a971-46e6-8ebb-096de7728e58","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11b6cd9d-a971-46e6-8ebb-096de7728e58","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11b6cd9d-a971-46e6-8ebb-096de7728e58","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11b6cd9d-a971-46e6-8ebb-096de7728e58","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b20a51/auth-test-model-b20a51\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"11b6cd9d-a971-46e6-8ebb-096de7728e58","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11b6cd9d-a971-46e6-8ebb-096de7728e58","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11b6cd9d-a971-46e6-8ebb-096de7728e58","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11b6cd9d-a971-46e6-8ebb-096de7728e58","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11b6cd9d-a971-46e6-8ebb-096de7728e58","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88ed1aa1-eaec-40ea-8d40-08dc8ba3680c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52530","PortSpecifier":{"PortValue":52530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88ed1aa1-eaec-40ea-8d40-08dc8ba3680c","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88ed1aa1-eaec-40ea-8d40-08dc8ba3680c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52530","PortSpecifier":{"PortValue":52530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625386,"nanos":207620703},"http":{"id":"88ed1aa1-eaec-40ea-8d40-08dc8ba3680c","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88ed1aa1-eaec-40ea-8d40-08dc8ba3680c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88ed1aa1-eaec-40ea-8d40-08dc8ba3680c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88ed1aa1-eaec-40ea-8d40-08dc8ba3680c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88ed1aa1-eaec-40ea-8d40-08dc8ba3680c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88ed1aa1-eaec-40ea-8d40-08dc8ba3680c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88ed1aa1-eaec-40ea-8d40-08dc8ba3680c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/auth-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88ed1aa1-eaec-40ea-8d40-08dc8ba3680c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88ed1aa1-eaec-40ea-8d40-08dc8ba3680c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88ed1aa1-eaec-40ea-8d40-08dc8ba3680c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88ed1aa1-eaec-40ea-8d40-08dc8ba3680c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88ed1aa1-eaec-40ea-8d40-08dc8ba3680c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a458597a-66c5-4776-a5a0-ac406b960ec6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54926","PortSpecifier":{"PortValue":54926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a458597a-66c5-4776-a5a0-ac406b960ec6","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a458597a-66c5-4776-a5a0-ac406b960ec6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54926","PortSpecifier":{"PortValue":54926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625386,"nanos":248003031},"http":{"id":"a458597a-66c5-4776-a5a0-ac406b960ec6","method":"POST","headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a458597a-66c5-4776-a5a0-ac406b960ec6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a458597a-66c5-4776-a5a0-ac406b960ec6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a458597a-66c5-4776-a5a0-ac406b960ec6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a458597a-66c5-4776-a5a0-ac406b960ec6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a458597a-66c5-4776-a5a0-ac406b960ec6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a458597a-66c5-4776-a5a0-ac406b960ec6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b20a51/auth-test-model-b20a51\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a458597a-66c5-4776-a5a0-ac406b960ec6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a458597a-66c5-4776-a5a0-ac406b960ec6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a458597a-66c5-4776-a5a0-ac406b960ec6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a458597a-66c5-4776-a5a0-ac406b960ec6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:29:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a458597a-66c5-4776-a5a0-ac406b960ec6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08b1ea57-e0a4-4486-8865-2e4800a32819","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52612","PortSpecifier":{"PortValue":52612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08b1ea57-e0a4-4486-8865-2e4800a32819","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08b1ea57-e0a4-4486-8865-2e4800a32819","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52612","PortSpecifier":{"PortValue":52612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625405,"nanos":460790859},"http":{"id":"08b1ea57-e0a4-4486-8865-2e4800a32819","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"08b1ea57-e0a4-4486-8865-2e4800a32819","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08b1ea57-e0a4-4486-8865-2e4800a32819","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08b1ea57-e0a4-4486-8865-2e4800a32819","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08b1ea57-e0a4-4486-8865-2e4800a32819","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08b1ea57-e0a4-4486-8865-2e4800a32819","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08b1ea57-e0a4-4486-8865-2e4800a32819","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/auth-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"08b1ea57-e0a4-4486-8865-2e4800a32819","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08b1ea57-e0a4-4486-8865-2e4800a32819","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08b1ea57-e0a4-4486-8865-2e4800a32819","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08b1ea57-e0a4-4486-8865-2e4800a32819","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08b1ea57-e0a4-4486-8865-2e4800a32819","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99d6a35d-f0f2-4785-b000-ddae5cf59ed6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52706","PortSpecifier":{"PortValue":52706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99d6a35d-f0f2-4785-b000-ddae5cf59ed6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99d6a35d-f0f2-4785-b000-ddae5cf59ed6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52706","PortSpecifier":{"PortValue":52706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625405,"nanos":494968866},"http":{"id":"99d6a35d-f0f2-4785-b000-ddae5cf59ed6","method":"POST","headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"99d6a35d-f0f2-4785-b000-ddae5cf59ed6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99d6a35d-f0f2-4785-b000-ddae5cf59ed6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99d6a35d-f0f2-4785-b000-ddae5cf59ed6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99d6a35d-f0f2-4785-b000-ddae5cf59ed6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99d6a35d-f0f2-4785-b000-ddae5cf59ed6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99d6a35d-f0f2-4785-b000-ddae5cf59ed6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b20a51/auth-test-model-b20a51\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"99d6a35d-f0f2-4785-b000-ddae5cf59ed6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99d6a35d-f0f2-4785-b000-ddae5cf59ed6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99d6a35d-f0f2-4785-b000-ddae5cf59ed6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99d6a35d-f0f2-4785-b000-ddae5cf59ed6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99d6a35d-f0f2-4785-b000-ddae5cf59ed6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58a563b0-0294-4a43-856b-333eb011d664","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52714","PortSpecifier":{"PortValue":52714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58a563b0-0294-4a43-856b-333eb011d664","method":"GET","path":"/maas-api/v1/api-keys/1aa43795-138f-4f70-8a0a-ecb954e900a8","host":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58a563b0-0294-4a43-856b-333eb011d664","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52714","PortSpecifier":{"PortValue":52714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625405,"nanos":530957145},"http":{"id":"58a563b0-0294-4a43-856b-333eb011d664","method":"GET","headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1aa43795-138f-4f70-8a0a-ecb954e900a8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"58a563b0-0294-4a43-856b-333eb011d664","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58a563b0-0294-4a43-856b-333eb011d664","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58a563b0-0294-4a43-856b-333eb011d664","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1aa43795-138f-4f70-8a0a-ecb954e900a8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58a563b0-0294-4a43-856b-333eb011d664","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58a563b0-0294-4a43-856b-333eb011d664","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58a563b0-0294-4a43-856b-333eb011d664","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b20a51/auth-test-model-b20a51\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"58a563b0-0294-4a43-856b-333eb011d664","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58a563b0-0294-4a43-856b-333eb011d664","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58a563b0-0294-4a43-856b-333eb011d664","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58a563b0-0294-4a43-856b-333eb011d664","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58a563b0-0294-4a43-856b-333eb011d664","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9843472b-db9d-49ab-9794-3cafc9d3ef04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52624","PortSpecifier":{"PortValue":52624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9843472b-db9d-49ab-9794-3cafc9d3ef04","method":"GET","path":"/maas-api/v1/api-keys/1aa43795-138f-4f70-8a0a-ecb954e900a8","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9843472b-db9d-49ab-9794-3cafc9d3ef04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52624","PortSpecifier":{"PortValue":52624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625405,"nanos":566119203},"http":{"id":"9843472b-db9d-49ab-9794-3cafc9d3ef04","method":"GET","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1aa43795-138f-4f70-8a0a-ecb954e900a8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9843472b-db9d-49ab-9794-3cafc9d3ef04","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9843472b-db9d-49ab-9794-3cafc9d3ef04","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9843472b-db9d-49ab-9794-3cafc9d3ef04","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1aa43795-138f-4f70-8a0a-ecb954e900a8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9843472b-db9d-49ab-9794-3cafc9d3ef04","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9843472b-db9d-49ab-9794-3cafc9d3ef04","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9843472b-db9d-49ab-9794-3cafc9d3ef04","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/auth-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9843472b-db9d-49ab-9794-3cafc9d3ef04","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9843472b-db9d-49ab-9794-3cafc9d3ef04","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9843472b-db9d-49ab-9794-3cafc9d3ef04","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9843472b-db9d-49ab-9794-3cafc9d3ef04","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:30:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9843472b-db9d-49ab-9794-3cafc9d3ef04","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4414ca2-f4f2-429c-a3fc-562dc97b85da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59280","PortSpecifier":{"PortValue":59280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4414ca2-f4f2-429c-a3fc-562dc97b85da","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4414ca2-f4f2-429c-a3fc-562dc97b85da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59280","PortSpecifier":{"PortValue":59280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625422,"nanos":673519097},"http":{"id":"f4414ca2-f4f2-429c-a3fc-562dc97b85da","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f4414ca2-f4f2-429c-a3fc-562dc97b85da","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4414ca2-f4f2-429c-a3fc-562dc97b85da","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4414ca2-f4f2-429c-a3fc-562dc97b85da","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4414ca2-f4f2-429c-a3fc-562dc97b85da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4414ca2-f4f2-429c-a3fc-562dc97b85da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4414ca2-f4f2-429c-a3fc-562dc97b85da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/auth-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4414ca2-f4f2-429c-a3fc-562dc97b85da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4414ca2-f4f2-429c-a3fc-562dc97b85da","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4414ca2-f4f2-429c-a3fc-562dc97b85da","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4414ca2-f4f2-429c-a3fc-562dc97b85da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4414ca2-f4f2-429c-a3fc-562dc97b85da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4be2b3a6-c7c1-447e-8ce4-1c2b7b1c4e77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56070","PortSpecifier":{"PortValue":56070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4be2b3a6-c7c1-447e-8ce4-1c2b7b1c4e77","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4be2b3a6-c7c1-447e-8ce4-1c2b7b1c4e77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56070","PortSpecifier":{"PortValue":56070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625422,"nanos":707508491},"http":{"id":"4be2b3a6-c7c1-447e-8ce4-1c2b7b1c4e77","method":"POST","headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4be2b3a6-c7c1-447e-8ce4-1c2b7b1c4e77","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4be2b3a6-c7c1-447e-8ce4-1c2b7b1c4e77","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4be2b3a6-c7c1-447e-8ce4-1c2b7b1c4e77","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4be2b3a6-c7c1-447e-8ce4-1c2b7b1c4e77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4be2b3a6-c7c1-447e-8ce4-1c2b7b1c4e77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4be2b3a6-c7c1-447e-8ce4-1c2b7b1c4e77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b20a51/auth-test-model-b20a51\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4be2b3a6-c7c1-447e-8ce4-1c2b7b1c4e77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4be2b3a6-c7c1-447e-8ce4-1c2b7b1c4e77","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4be2b3a6-c7c1-447e-8ce4-1c2b7b1c4e77","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4be2b3a6-c7c1-447e-8ce4-1c2b7b1c4e77","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4be2b3a6-c7c1-447e-8ce4-1c2b7b1c4e77","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b793d230-2f10-4efd-99bf-378a4349ba33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59282","PortSpecifier":{"PortValue":59282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b793d230-2f10-4efd-99bf-378a4349ba33","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b793d230-2f10-4efd-99bf-378a4349ba33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59282","PortSpecifier":{"PortValue":59282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625422,"nanos":740618714},"http":{"id":"b793d230-2f10-4efd-99bf-378a4349ba33","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b793d230-2f10-4efd-99bf-378a4349ba33","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ddb9xJOqKy5rf2l1_VHvMIQIpNEGElxNcoIic74TLBS6YKjWVmpbx61Oju9O"}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b793d230-2f10-4efd-99bf-378a4349ba33","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ddb9xJOqKy5rf2l1_VHvMIQIpNEGElxNcoIic74TLBS6YKjWVmpbx61Oju9O\"}"}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b793d230-2f10-4efd-99bf-378a4349ba33","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97621d37-2132-42fb-a345-42400b11ef65","keyName":"e2e-auth-iso-a-cff5ce","subscription":"e2e-auth-iso-f7289f","tenant":"e2e-shared-a-5d8f8f","userId":"97621d37-2132-42fb-a345-42400b11ef65","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b793d230-2f10-4efd-99bf-378a4349ba33","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b793d230-2f10-4efd-99bf-378a4349ba33","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b793d230-2f10-4efd-99bf-378a4349ba33","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b793d230-2f10-4efd-99bf-378a4349ba33","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/auth-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b793d230-2f10-4efd-99bf-378a4349ba33","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b793d230-2f10-4efd-99bf-378a4349ba33","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b793d230-2f10-4efd-99bf-378a4349ba33","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f7289f"}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b793d230-2f10-4efd-99bf-378a4349ba33","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b793d230-2f10-4efd-99bf-378a4349ba33","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:30:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b793d230-2f10-4efd-99bf-378a4349ba33","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b063c4eb8ceb74b871cc7129cb432ae48bd9e78554f1d6ccfd0f8bc4499c8716"}
{"level":"info","ts":"2026-07-09T19:30:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0493d5c6240f0dcdfe1af1a0bdb75368291cee24c4cd5ad48a736022fa28d964"}
{"level":"info","ts":"2026-07-09T19:30:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0afaafc7a3ecf3e27c29f50b592ac33232369ab7599f64c4e74e808676412aa9"}
{"level":"info","ts":"2026-07-09T19:30:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b0dc3d30804989f787cccc872d237b520bad020c8de97951dd391c09deff279"}
{"level":"info","ts":"2026-07-09T19:30:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/deae03474d883b87b305434d7dbacc7f28926736bce71bf0c252a6d2de0c1b43"}
{"level":"info","ts":"2026-07-09T19:30:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0cd4856a135b2abe69de0eef2478e07fc72e7375166ada36e6f8bb6bc92e315b"}
{"level":"info","ts":"2026-07-09T19:30:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e70783c40e2c93aa18d80759ef6aa8b39aad563dff34ff1abec165438a5c4122"}
{"level":"info","ts":"2026-07-09T19:30:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f6b78f136a0341842075719f512ab32c36ff5f435da94858be9a98ca01305bd"}
{"level":"info","ts":"2026-07-09T19:30:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3772f9d68108043c55dbfec77af739b67027b5460d9f36040d55c0c194479e45"}
{"level":"info","ts":"2026-07-09T19:30:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/606f5c1b92e086a4ce7a3fbd16f540a7dd343ae9dc74f7be83680eb1e1929f1b"}
{"level":"info","ts":"2026-07-09T19:30:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee911e4103a6050019d7dcea3578b2cf2413a09ac03b4d0db598bf0731ad7468"}
{"level":"info","ts":"2026-07-09T19:30:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72482e77d111d05b655b4ec7afbedfed1e15cb61aab9232da0d47de40063eed7"}
{"level":"info","ts":"2026-07-09T19:30:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5c27bdc08e198ea56ecce9c89f3d544369d48fec8071d43a54a2f4f47fd483a"}
{"level":"info","ts":"2026-07-09T19:30:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c16b5ad201a5eccfc0040cbc89dfca5f2b59b505e4ad9b61cb622b49f8776b11"}
{"level":"info","ts":"2026-07-09T19:30:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a6ca3b3137672cadee69edb44c99d30c20e7bde5dfb72d638785662879d9efb"}
{"level":"info","ts":"2026-07-09T19:30:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ce4b07a8add2d2d2c59ceb8d9bd4b8bf63e828f449276c0888675ace01aebfe"}
{"level":"debug","ts":"2026-07-09T19:30:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdcec80106e3d2550b7b3cad60d0f92cc19dbe97be04c4e2f15df2175267bbf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdcec80106e3d2550b7b3cad60d0f92cc19dbe97be04c4e2f15df2175267bbf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdcec80106e3d2550b7b3cad60d0f92cc19dbe97be04c4e2f15df2175267bbf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdcec80106e3d2550b7b3cad60d0f92cc19dbe97be04c4e2f15df2175267bbf2"}
{"level":"info","ts":"2026-07-09T19:30:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdcec80106e3d2550b7b3cad60d0f92cc19dbe97be04c4e2f15df2175267bbf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdcec80106e3d2550b7b3cad60d0f92cc19dbe97be04c4e2f15df2175267bbf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T19:30:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bdcec80106e3d2550b7b3cad60d0f92cc19dbe97be04c4e2f15df2175267bbf2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bdcec80106e3d2550b7b3cad60d0f92cc19dbe97be04c4e2f15df2175267bbf2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:30:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdcec80106e3d2550b7b3cad60d0f92cc19dbe97be04c4e2f15df2175267bbf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdcec80106e3d2550b7b3cad60d0f92cc19dbe97be04c4e2f15df2175267bbf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdcec80106e3d2550b7b3cad60d0f92cc19dbe97be04c4e2f15df2175267bbf2"}
{"level":"info","ts":"2026-07-09T19:30:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdcec80106e3d2550b7b3cad60d0f92cc19dbe97be04c4e2f15df2175267bbf2"}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdcec80106e3d2550b7b3cad60d0f92cc19dbe97be04c4e2f15df2175267bbf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdcec80106e3d2550b7b3cad60d0f92cc19dbe97be04c4e2f15df2175267bbf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdcec80106e3d2550b7b3cad60d0f92cc19dbe97be04c4e2f15df2175267bbf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdcec80106e3d2550b7b3cad60d0f92cc19dbe97be04c4e2f15df2175267bbf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdcec80106e3d2550b7b3cad60d0f92cc19dbe97be04c4e2f15df2175267bbf2"}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb"}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb"}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb"}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb"}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb"}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217"}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602"}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217"}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602"}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"313dcb92bb647eb7ccd0cf0e7557c92f332c7f2c09d819471e26faca0137f597","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217"}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"313dcb92bb647eb7ccd0cf0e7557c92f332c7f2c09d819471e26faca0137f597","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602"}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"313dcb92bb647eb7ccd0cf0e7557c92f332c7f2c09d819471e26faca0137f597","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/313dcb92bb647eb7ccd0cf0e7557c92f332c7f2c09d819471e26faca0137f597"}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"313dcb92bb647eb7ccd0cf0e7557c92f332c7f2c09d819471e26faca0137f597","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217"}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"313dcb92bb647eb7ccd0cf0e7557c92f332c7f2c09d819471e26faca0137f597","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["313dcb92bb647eb7ccd0cf0e7557c92f332c7f2c09d819471e26faca0137f597"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"313dcb92bb647eb7ccd0cf0e7557c92f332c7f2c09d819471e26faca0137f597","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602"}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/313dcb92bb647eb7ccd0cf0e7557c92f332c7f2c09d819471e26faca0137f597"}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"313dcb92bb647eb7ccd0cf0e7557c92f332c7f2c09d819471e26faca0137f597","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217"}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25"}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602"}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217"}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25"}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"558b93963129f08d9b75b72c8a7caf96ef65f2569678b35acf01beac68ca6114","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"558b93963129f08d9b75b72c8a7caf96ef65f2569678b35acf01beac68ca6114","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"558b93963129f08d9b75b72c8a7caf96ef65f2569678b35acf01beac68ca6114","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/558b93963129f08d9b75b72c8a7caf96ef65f2569678b35acf01beac68ca6114"}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"558b93963129f08d9b75b72c8a7caf96ef65f2569678b35acf01beac68ca6114","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"558b93963129f08d9b75b72c8a7caf96ef65f2569678b35acf01beac68ca6114","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"558b93963129f08d9b75b72c8a7caf96ef65f2569678b35acf01beac68ca6114","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"558b93963129f08d9b75b72c8a7caf96ef65f2569678b35acf01beac68ca6114\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"558b93963129f08d9b75b72c8a7caf96ef65f2569678b35acf01beac68ca6114","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"558b93963129f08d9b75b72c8a7caf96ef65f2569678b35acf01beac68ca6114","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/558b93963129f08d9b75b72c8a7caf96ef65f2569678b35acf01beac68ca6114"}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/558b93963129f08d9b75b72c8a7caf96ef65f2569678b35acf01beac68ca6114"}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"558b93963129f08d9b75b72c8a7caf96ef65f2569678b35acf01beac68ca6114","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["558b93963129f08d9b75b72c8a7caf96ef65f2569678b35acf01beac68ca6114"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"558b93963129f08d9b75b72c8a7caf96ef65f2569678b35acf01beac68ca6114","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"558b93963129f08d9b75b72c8a7caf96ef65f2569678b35acf01beac68ca6114","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/558b93963129f08d9b75b72c8a7caf96ef65f2569678b35acf01beac68ca6114"}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"}
{"level":"debug","ts":"2026-07-09T19:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c"}
{"level":"error","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5"}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5"}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c"}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c"}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c"}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274"}
{"level":"error","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c"}
{"level":"info","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274"}
{"level":"info","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b1611dfd28c5a6425c861d9d775bad3fe7a500aa44c9fe40535de44ea957710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b1611dfd28c5a6425c861d9d775bad3fe7a500aa44c9fe40535de44ea957710"}
{"level":"info","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b1611dfd28c5a6425c861d9d775bad3fe7a500aa44c9fe40535de44ea957710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274"}
{"level":"info","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b1611dfd28c5a6425c861d9d775bad3fe7a500aa44c9fe40535de44ea957710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b1611dfd28c5a6425c861d9d775bad3fe7a500aa44c9fe40535de44ea957710"}
{"level":"info","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274"}
{"level":"info","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b1611dfd28c5a6425c861d9d775bad3fe7a500aa44c9fe40535de44ea957710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b1611dfd28c5a6425c861d9d775bad3fe7a500aa44c9fe40535de44ea957710"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274"}
{"level":"info","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/360f2cc15c4080d5b356bd1df08e08e502574bfd37653561005be22ef3804133"}
{"level":"info","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b1611dfd28c5a6425c861d9d775bad3fe7a500aa44c9fe40535de44ea957710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"360f2cc15c4080d5b356bd1df08e08e502574bfd37653561005be22ef3804133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["360f2cc15c4080d5b356bd1df08e08e502574bfd37653561005be22ef3804133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b1611dfd28c5a6425c861d9d775bad3fe7a500aa44c9fe40535de44ea957710"}
{"level":"info","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"360f2cc15c4080d5b356bd1df08e08e502574bfd37653561005be22ef3804133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b1611dfd28c5a6425c861d9d775bad3fe7a500aa44c9fe40535de44ea957710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"360f2cc15c4080d5b356bd1df08e08e502574bfd37653561005be22ef3804133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/360f2cc15c4080d5b356bd1df08e08e502574bfd37653561005be22ef3804133"}
{"level":"debug","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728"}
{"level":"debug","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728"}
{"level":"debug","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728"}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c"}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c"}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c"}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c"}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"360f2cc15c4080d5b356bd1df08e08e502574bfd37653561005be22ef3804133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c"}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/360f2cc15c4080d5b356bd1df08e08e502574bfd37653561005be22ef3804133"}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217"}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c"}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217"}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2"}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7"}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b"}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b"}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b"}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"}
{"level":"info","ts":"2026-07-09T19:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b"}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728"}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728"}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"558b93963129f08d9b75b72c8a7caf96ef65f2569678b35acf01beac68ca6114","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728"}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/558b93963129f08d9b75b72c8a7caf96ef65f2569678b35acf01beac68ca6114"}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5eb2a9d3813086de86f6c30c5038293777cbaf6917e2c07daf90c0b1cb94651","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5eb2a9d3813086de86f6c30c5038293777cbaf6917e2c07daf90c0b1cb94651"}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdcec80106e3d2550b7b3cad60d0f92cc19dbe97be04c4e2f15df2175267bbf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25"}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdcec80106e3d2550b7b3cad60d0f92cc19dbe97be04c4e2f15df2175267bbf2"}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:31:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:31:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25"}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb"}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:31:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:31:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602"}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"313dcb92bb647eb7ccd0cf0e7557c92f332c7f2c09d819471e26faca0137f597","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25"}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/313dcb92bb647eb7ccd0cf0e7557c92f332c7f2c09d819471e26faca0137f597"}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"}
{"level":"debug","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b1611dfd28c5a6425c861d9d775bad3fe7a500aa44c9fe40535de44ea957710","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5"}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274"}
{"level":"info","ts":"2026-07-09T19:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b1611dfd28c5a6425c861d9d775bad3fe7a500aa44c9fe40535de44ea957710"}
{"level":"info","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a9dd63b-313c-4ea8-a1e4-40b3d3bc9f66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:43934","PortSpecifier":{"PortValue":43934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a9dd63b-313c-4ea8-a1e4-40b3d3bc9f66","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a9dd63b-313c-4ea8-a1e4-40b3d3bc9f66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:43934","PortSpecifier":{"PortValue":43934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625499,"nanos":421946123},"http":{"id":"3a9dd63b-313c-4ea8-a1e4-40b3d3bc9f66","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3a9dd63b-313c-4ea8-a1e4-40b3d3bc9f66","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a9dd63b-313c-4ea8-a1e4-40b3d3bc9f66","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a9dd63b-313c-4ea8-a1e4-40b3d3bc9f66","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a9dd63b-313c-4ea8-a1e4-40b3d3bc9f66","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a9dd63b-313c-4ea8-a1e4-40b3d3bc9f66","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a9dd63b-313c-4ea8-a1e4-40b3d3bc9f66","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/sub-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3a9dd63b-313c-4ea8-a1e4-40b3d3bc9f66","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a9dd63b-313c-4ea8-a1e4-40b3d3bc9f66","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a9dd63b-313c-4ea8-a1e4-40b3d3bc9f66","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a9dd63b-313c-4ea8-a1e4-40b3d3bc9f66","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a9dd63b-313c-4ea8-a1e4-40b3d3bc9f66","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d995024-b910-42e5-ba7f-d0a4f516f7b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54526","PortSpecifier":{"PortValue":54526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9d995024-b910-42e5-ba7f-d0a4f516f7b1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d995024-b910-42e5-ba7f-d0a4f516f7b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54526","PortSpecifier":{"PortValue":54526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625499,"nanos":463736164},"http":{"id":"9d995024-b910-42e5-ba7f-d0a4f516f7b1","method":"POST","headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9d995024-b910-42e5-ba7f-d0a4f516f7b1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9d995024-b910-42e5-ba7f-d0a4f516f7b1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9d995024-b910-42e5-ba7f-d0a4f516f7b1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d995024-b910-42e5-ba7f-d0a4f516f7b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d995024-b910-42e5-ba7f-d0a4f516f7b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d995024-b910-42e5-ba7f-d0a4f516f7b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b20a51/sub-test-model-b20a51\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9d995024-b910-42e5-ba7f-d0a4f516f7b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d995024-b910-42e5-ba7f-d0a4f516f7b1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d995024-b910-42e5-ba7f-d0a4f516f7b1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d995024-b910-42e5-ba7f-d0a4f516f7b1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d995024-b910-42e5-ba7f-d0a4f516f7b1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f28d5032-010f-4ffa-9802-5f933661e2eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:43946","PortSpecifier":{"PortValue":43946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f28d5032-010f-4ffa-9802-5f933661e2eb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f28d5032-010f-4ffa-9802-5f933661e2eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:43946","PortSpecifier":{"PortValue":43946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625499,"nanos":506013245},"http":{"id":"f28d5032-010f-4ffa-9802-5f933661e2eb","method":"GET","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f28d5032-010f-4ffa-9802-5f933661e2eb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BwqTYVkGLld2i2Ts_LqFcGmDUhXlLsdshGBci7m890tdEso1tId9Xk9RTqNZ"}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f28d5032-010f-4ffa-9802-5f933661e2eb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BwqTYVkGLld2i2Ts_LqFcGmDUhXlLsdshGBci7m890tdEso1tId9Xk9RTqNZ\"}"}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f28d5032-010f-4ffa-9802-5f933661e2eb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"984d7d07-d07e-408f-a1c7-a6a8d6527691","keyName":"e2e-sub-iso-5956c6","subscription":"e2e-a-only-37ab43","tenant":"e2e-shared-a-5d8f8f","userId":"984d7d07-d07e-408f-a1c7-a6a8d6527691","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f28d5032-010f-4ffa-9802-5f933661e2eb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f28d5032-010f-4ffa-9802-5f933661e2eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f28d5032-010f-4ffa-9802-5f933661e2eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f28d5032-010f-4ffa-9802-5f933661e2eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/sub-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f28d5032-010f-4ffa-9802-5f933661e2eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f28d5032-010f-4ffa-9802-5f933661e2eb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-37ab43"}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f28d5032-010f-4ffa-9802-5f933661e2eb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f28d5032-010f-4ffa-9802-5f933661e2eb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f28d5032-010f-4ffa-9802-5f933661e2eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f28d5032-010f-4ffa-9802-5f933661e2eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69f889d1-0334-4145-b8e9-a8bd252e7325","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54538","PortSpecifier":{"PortValue":54538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69f889d1-0334-4145-b8e9-a8bd252e7325","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69f889d1-0334-4145-b8e9-a8bd252e7325","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54538","PortSpecifier":{"PortValue":54538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625499,"nanos":551378708},"http":{"id":"69f889d1-0334-4145-b8e9-a8bd252e7325","method":"GET","headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69f889d1-0334-4145-b8e9-a8bd252e7325","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MfaZWDFvtYYAELHz_8pV1p8EpvmEaeamTpeOd5xgdCbqBoiAtFicBF2tJp8p"}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"69f889d1-0334-4145-b8e9-a8bd252e7325","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b20a51.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MfaZWDFvtYYAELHz_8pV1p8EpvmEaeamTpeOd5xgdCbqBoiAtFicBF2tJp8p\"}"}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"69f889d1-0334-4145-b8e9-a8bd252e7325","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b20a51.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dd80a170-2e39-40c6-b2aa-252eae17d436","keyName":"e2e-sub-iso-e37856","subscription":"e2e-b-only-37ab43","tenant":"e2e-shared-b-b20a51","userId":"dd80a170-2e39-40c6-b2aa-252eae17d436","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69f889d1-0334-4145-b8e9-a8bd252e7325","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69f889d1-0334-4145-b8e9-a8bd252e7325","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69f889d1-0334-4145-b8e9-a8bd252e7325","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69f889d1-0334-4145-b8e9-a8bd252e7325","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b20a51/sub-test-model-b20a51\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69f889d1-0334-4145-b8e9-a8bd252e7325","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69f889d1-0334-4145-b8e9-a8bd252e7325","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69f889d1-0334-4145-b8e9-a8bd252e7325","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-37ab43"}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69f889d1-0334-4145-b8e9-a8bd252e7325","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69f889d1-0334-4145-b8e9-a8bd252e7325","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69f889d1-0334-4145-b8e9-a8bd252e7325","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a246fb4-0cff-4543-b031-dcd0d445d22e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:38334","PortSpecifier":{"PortValue":38334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a246fb4-0cff-4543-b031-dcd0d445d22e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a246fb4-0cff-4543-b031-dcd0d445d22e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:38334","PortSpecifier":{"PortValue":38334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625518,"nanos":57464108},"http":{"id":"7a246fb4-0cff-4543-b031-dcd0d445d22e","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7a246fb4-0cff-4543-b031-dcd0d445d22e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a246fb4-0cff-4543-b031-dcd0d445d22e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a246fb4-0cff-4543-b031-dcd0d445d22e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a246fb4-0cff-4543-b031-dcd0d445d22e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a246fb4-0cff-4543-b031-dcd0d445d22e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a246fb4-0cff-4543-b031-dcd0d445d22e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/sub-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a246fb4-0cff-4543-b031-dcd0d445d22e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a246fb4-0cff-4543-b031-dcd0d445d22e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a246fb4-0cff-4543-b031-dcd0d445d22e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a246fb4-0cff-4543-b031-dcd0d445d22e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a246fb4-0cff-4543-b031-dcd0d445d22e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5649fe11-286b-4406-b42b-a9969e24f238","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51980","PortSpecifier":{"PortValue":51980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5649fe11-286b-4406-b42b-a9969e24f238","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5649fe11-286b-4406-b42b-a9969e24f238","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51980","PortSpecifier":{"PortValue":51980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625518,"nanos":96916650},"http":{"id":"5649fe11-286b-4406-b42b-a9969e24f238","method":"POST","headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5649fe11-286b-4406-b42b-a9969e24f238","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5649fe11-286b-4406-b42b-a9969e24f238","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5649fe11-286b-4406-b42b-a9969e24f238","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5649fe11-286b-4406-b42b-a9969e24f238","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5649fe11-286b-4406-b42b-a9969e24f238","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5649fe11-286b-4406-b42b-a9969e24f238","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b20a51/sub-test-model-b20a51\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5649fe11-286b-4406-b42b-a9969e24f238","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5649fe11-286b-4406-b42b-a9969e24f238","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5649fe11-286b-4406-b42b-a9969e24f238","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5649fe11-286b-4406-b42b-a9969e24f238","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5649fe11-286b-4406-b42b-a9969e24f238","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"229661b2-dda1-4d7a-9b7f-cc5b021d41dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:38342","PortSpecifier":{"PortValue":38342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"229661b2-dda1-4d7a-9b7f-cc5b021d41dd","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"229661b2-dda1-4d7a-9b7f-cc5b021d41dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:38342","PortSpecifier":{"PortValue":38342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625518,"nanos":134098901},"http":{"id":"229661b2-dda1-4d7a-9b7f-cc5b021d41dd","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"229661b2-dda1-4d7a-9b7f-cc5b021d41dd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wW6pyXdOfuNhfwrm_JWCEssFHvsT8JH1s1yArYjh6SYYcZP9zqwyCPUEM2k2"}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"229661b2-dda1-4d7a-9b7f-cc5b021d41dd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wW6pyXdOfuNhfwrm_JWCEssFHvsT8JH1s1yArYjh6SYYcZP9zqwyCPUEM2k2\"}"}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"229661b2-dda1-4d7a-9b7f-cc5b021d41dd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d5b4ac02-b66f-4736-b4ca-363f533f827d","keyName":"e2e-sub-iso-c0fe28","subscription":"e2e-shared-sub-f89bb8","tenant":"e2e-shared-a-5d8f8f","userId":"d5b4ac02-b66f-4736-b4ca-363f533f827d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"229661b2-dda1-4d7a-9b7f-cc5b021d41dd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"229661b2-dda1-4d7a-9b7f-cc5b021d41dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"229661b2-dda1-4d7a-9b7f-cc5b021d41dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"229661b2-dda1-4d7a-9b7f-cc5b021d41dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/sub-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"229661b2-dda1-4d7a-9b7f-cc5b021d41dd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"229661b2-dda1-4d7a-9b7f-cc5b021d41dd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-f89bb8"}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"229661b2-dda1-4d7a-9b7f-cc5b021d41dd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"229661b2-dda1-4d7a-9b7f-cc5b021d41dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"229661b2-dda1-4d7a-9b7f-cc5b021d41dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"229661b2-dda1-4d7a-9b7f-cc5b021d41dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"643754f2-1bc3-4fc4-bee9-12f84a8259e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51992","PortSpecifier":{"PortValue":51992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"643754f2-1bc3-4fc4-bee9-12f84a8259e3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"643754f2-1bc3-4fc4-bee9-12f84a8259e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51992","PortSpecifier":{"PortValue":51992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625518,"nanos":164417270},"http":{"id":"643754f2-1bc3-4fc4-bee9-12f84a8259e3","method":"POST","headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"643754f2-1bc3-4fc4-bee9-12f84a8259e3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BLaxR1d28lYmiBTu_AUhtWn4wmfg0PFoWToydbo8PoG90a2EfVjfIu6HRiWK"}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"643754f2-1bc3-4fc4-bee9-12f84a8259e3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b20a51.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BLaxR1d28lYmiBTu_AUhtWn4wmfg0PFoWToydbo8PoG90a2EfVjfIu6HRiWK\"}"}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"643754f2-1bc3-4fc4-bee9-12f84a8259e3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b20a51.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d801df0f-6065-4ea5-b768-9f1187bd1a30","keyName":"e2e-sub-iso-2a2a45","subscription":"e2e-shared-sub-f89bb8","tenant":"e2e-shared-b-b20a51","userId":"d801df0f-6065-4ea5-b768-9f1187bd1a30","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"643754f2-1bc3-4fc4-bee9-12f84a8259e3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"643754f2-1bc3-4fc4-bee9-12f84a8259e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"643754f2-1bc3-4fc4-bee9-12f84a8259e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"643754f2-1bc3-4fc4-bee9-12f84a8259e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b20a51/sub-test-model-b20a51\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"643754f2-1bc3-4fc4-bee9-12f84a8259e3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"643754f2-1bc3-4fc4-bee9-12f84a8259e3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-f89bb8"}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"643754f2-1bc3-4fc4-bee9-12f84a8259e3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"643754f2-1bc3-4fc4-bee9-12f84a8259e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"643754f2-1bc3-4fc4-bee9-12f84a8259e3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:31:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"643754f2-1bc3-4fc4-bee9-12f84a8259e3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdcec80106e3d2550b7b3cad60d0f92cc19dbe97be04c4e2f15df2175267bbf2"}
{"level":"info","ts":"2026-07-09T19:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ed782c43b48636d29a066cff884151b496bdbad283350a3f830bef45dd02217"}
{"level":"info","ts":"2026-07-09T19:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fc77e838916dffd4df49dae1c4ad0632714beb1a016ab415b3d32ec13b95573"}
{"level":"info","ts":"2026-07-09T19:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/973a56a862ec3d57b4ead382a68c9a54d1c58dbcae196253b64af9d82abeafcb"}
{"level":"info","ts":"2026-07-09T19:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/313dcb92bb647eb7ccd0cf0e7557c92f332c7f2c09d819471e26faca0137f597"}
{"level":"info","ts":"2026-07-09T19:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52165a854da852625e0c7444100e112ec98da86435eb61265615942176791a25"}
{"level":"info","ts":"2026-07-09T19:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/558b93963129f08d9b75b72c8a7caf96ef65f2569678b35acf01beac68ca6114"}
{"level":"info","ts":"2026-07-09T19:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4d2c0c7ddbdeae44ef4ee8f9d10f08d400cc12a6233b44ff8bd57725f2c1602"}
{"level":"info","ts":"2026-07-09T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02523cef9ccba93b9af54bcfa6861dbfcf4f2dfa71eb5806ef8d4b80d337df8c"}
{"level":"info","ts":"2026-07-09T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/360f2cc15c4080d5b356bd1df08e08e502574bfd37653561005be22ef3804133"}
{"level":"info","ts":"2026-07-09T19:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b53a67f4a782a785456fd309501bd0664fd40ee9454f52b3ac08aaa1c786728"}
{"level":"info","ts":"2026-07-09T19:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd4b5e321a5b48d3472e72865873646895707a87ae2c304bd436fdb6abaf88e7"}
{"level":"info","ts":"2026-07-09T19:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ea54f65e0b6bdb08b46ff33ac15db8131c0b70d00108cbf1375bb2a1110710c"}
{"level":"info","ts":"2026-07-09T19:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06a89be5710b1125ff6df681e3705c6e165571409516cbeae7a9daa9a373e274"}
{"level":"info","ts":"2026-07-09T19:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b1611dfd28c5a6425c861d9d775bad3fe7a500aa44c9fe40535de44ea957710"}
{"level":"info","ts":"2026-07-09T19:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c9fad23f8b0adbd65a723d86896cf1acc9137f5ba390d2a257ee61f1f661fe5"}
{"level":"debug","ts":"2026-07-09T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5"}
{"level":"info","ts":"2026-07-09T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5"}
{"level":"info","ts":"2026-07-09T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5"}
{"level":"debug","ts":"2026-07-09T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5"}
{"level":"debug","ts":"2026-07-09T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126"}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77"}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77"}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"}
{"level":"error","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8309f566e258e984ce9641577bd0970fc7a737e6596f6dc95d64bdea75adbd21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8309f566e258e984ce9641577bd0970fc7a737e6596f6dc95d64bdea75adbd21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8309f566e258e984ce9641577bd0970fc7a737e6596f6dc95d64bdea75adbd21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8309f566e258e984ce9641577bd0970fc7a737e6596f6dc95d64bdea75adbd21"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8309f566e258e984ce9641577bd0970fc7a737e6596f6dc95d64bdea75adbd21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8309f566e258e984ce9641577bd0970fc7a737e6596f6dc95d64bdea75adbd21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8309f566e258e984ce9641577bd0970fc7a737e6596f6dc95d64bdea75adbd21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8309f566e258e984ce9641577bd0970fc7a737e6596f6dc95d64bdea75adbd21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8309f566e258e984ce9641577bd0970fc7a737e6596f6dc95d64bdea75adbd21"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8309f566e258e984ce9641577bd0970fc7a737e6596f6dc95d64bdea75adbd21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519"}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8309f566e258e984ce9641577bd0970fc7a737e6596f6dc95d64bdea75adbd21"}
{"level":"error","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d"}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d"}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d"}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d"}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d675d19490942c427b4f87a4f3d883a192f8ee77c46205fbbd20d02735de119","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d675d19490942c427b4f87a4f3d883a192f8ee77c46205fbbd20d02735de119"}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d675d19490942c427b4f87a4f3d883a192f8ee77c46205fbbd20d02735de119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d675d19490942c427b4f87a4f3d883a192f8ee77c46205fbbd20d02735de119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d675d19490942c427b4f87a4f3d883a192f8ee77c46205fbbd20d02735de119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d675d19490942c427b4f87a4f3d883a192f8ee77c46205fbbd20d02735de119"}
{"level":"error","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d675d19490942c427b4f87a4f3d883a192f8ee77c46205fbbd20d02735de119","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d675d19490942c427b4f87a4f3d883a192f8ee77c46205fbbd20d02735de119"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d675d19490942c427b4f87a4f3d883a192f8ee77c46205fbbd20d02735de119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d675d19490942c427b4f87a4f3d883a192f8ee77c46205fbbd20d02735de119","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d675d19490942c427b4f87a4f3d883a192f8ee77c46205fbbd20d02735de119"}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b"}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b"}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b"}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b"}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"}
{"level":"error","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734"}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734"}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1"}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519"}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d675d19490942c427b4f87a4f3d883a192f8ee77c46205fbbd20d02735de119","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d675d19490942c427b4f87a4f3d883a192f8ee77c46205fbbd20d02735de119"}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"}
{"level":"error","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b"}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"}
{"level":"error","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5eb2a9d3813086de86f6c30c5038293777cbaf6917e2c07daf90c0b1cb94651","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5eb2a9d3813086de86f6c30c5038293777cbaf6917e2c07daf90c0b1cb94651"}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5"}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314"}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5"}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8309f566e258e984ce9641577bd0970fc7a737e6596f6dc95d64bdea75adbd21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314"}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d"}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5"}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8309f566e258e984ce9641577bd0970fc7a737e6596f6dc95d64bdea75adbd21"}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b"}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734"}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77"}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7"}
{"level":"info","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50248","PortSpecifier":{"PortValue":50248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50248","PortSpecifier":{"PortValue":50248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625593,"nanos":852395246},"http":{"id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56870","PortSpecifier":{"PortValue":56870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6098b6fe-7efa-4660-8c87-17beca598d4f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56870","PortSpecifier":{"PortValue":56870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625593,"nanos":899858695},"http":{"id":"6098b6fe-7efa-4660-8c87-17beca598d4f","method":"POST","headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b20a51/rate-test-model-b20a51\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50250","PortSpecifier":{"PortValue":50250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f64d97d-f489-431d-906b-20279d2e5bc2","method":"POST","path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50250","PortSpecifier":{"PortValue":50250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625593,"nanos":946636394},"http":{"id":"4f64d97d-f489-431d-906b-20279d2e5bc2","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QBFrb1KP5dy7xYBF_7zkWUcf8yC2SD7RjEBh3b4joIfdywOKjPTpwZXT3cvL"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QBFrb1KP5dy7xYBF_7zkWUcf8yC2SD7RjEBh3b4joIfdywOKjPTpwZXT3cvL\"}"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da9492c0-e0d1-40b0-b918-46b770ef27a7","keyName":"e2e-rate-a-33aef7","subscription":"e2e-rate-iso-a-33aef7","tenant":"e2e-shared-a-5d8f8f","userId":"da9492c0-e0d1-40b0-b918-46b770ef27a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\",\"requestedSubscription\":\"e2e-rate-iso-a-33aef7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-33aef7","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-33aef7"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"da9492c0-e0d1-40b0-b918-46b770ef27a7","keyName":"e2e-rate-a-33aef7","selected_subscription":"e2e-rate-iso-a-33aef7","selected_subscription_key":"ai-tenant-e2e-shared-a-5d8f8f/e2e-rate-iso-a-33aef7@ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-33aef7","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50258","PortSpecifier":{"PortValue":50258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","method":"POST","path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50258","PortSpecifier":{"PortValue":50258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625595,"nanos":10471348},"http":{"id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QBFrb1KP5dy7xYBF_7zkWUcf8yC2SD7RjEBh3b4joIfdywOKjPTpwZXT3cvL"}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QBFrb1KP5dy7xYBF_7zkWUcf8yC2SD7RjEBh3b4joIfdywOKjPTpwZXT3cvL\"}"}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da9492c0-e0d1-40b0-b918-46b770ef27a7","keyName":"e2e-rate-a-33aef7","subscription":"e2e-rate-iso-a-33aef7","tenant":"e2e-shared-a-5d8f8f","userId":"da9492c0-e0d1-40b0-b918-46b770ef27a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\",\"requestedSubscription\":\"e2e-rate-iso-a-33aef7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-33aef7","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-33aef7"}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"da9492c0-e0d1-40b0-b918-46b770ef27a7","keyName":"e2e-rate-a-33aef7","selected_subscription":"e2e-rate-iso-a-33aef7","selected_subscription_key":"ai-tenant-e2e-shared-a-5d8f8f/e2e-rate-iso-a-33aef7@ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-33aef7","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50272","PortSpecifier":{"PortValue":50272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","method":"POST","path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50272","PortSpecifier":{"PortValue":50272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625596,"nanos":52272136},"http":{"id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QBFrb1KP5dy7xYBF_7zkWUcf8yC2SD7RjEBh3b4joIfdywOKjPTpwZXT3cvL"}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QBFrb1KP5dy7xYBF_7zkWUcf8yC2SD7RjEBh3b4joIfdywOKjPTpwZXT3cvL\"}"}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da9492c0-e0d1-40b0-b918-46b770ef27a7","keyName":"e2e-rate-a-33aef7","subscription":"e2e-rate-iso-a-33aef7","tenant":"e2e-shared-a-5d8f8f","userId":"da9492c0-e0d1-40b0-b918-46b770ef27a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\",\"requestedSubscription\":\"e2e-rate-iso-a-33aef7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-33aef7","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-33aef7"}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"da9492c0-e0d1-40b0-b918-46b770ef27a7","keyName":"e2e-rate-a-33aef7","selected_subscription":"e2e-rate-iso-a-33aef7","selected_subscription_key":"ai-tenant-e2e-shared-a-5d8f8f/e2e-rate-iso-a-33aef7@ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-33aef7","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58714","PortSpecifier":{"PortValue":58714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"188008db-6be0-4a46-81b3-a2a73d5caeef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58714","PortSpecifier":{"PortValue":58714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625609,"nanos":1105220},"http":{"id":"188008db-6be0-4a46-81b3-a2a73d5caeef","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42030","PortSpecifier":{"PortValue":42030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42030","PortSpecifier":{"PortValue":42030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625609,"nanos":44092840},"http":{"id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","method":"POST","headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b20a51/rate-test-model-b20a51\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58730","PortSpecifier":{"PortValue":58730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","method":"POST","path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58730","PortSpecifier":{"PortValue":58730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625609,"nanos":82538824},"http":{"id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ygtkkquJxQIVR4qE_1O5r6LcAH0wyYfXn7ONqkFVHuZIkrH7xIPPCvNEZhzV"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ygtkkquJxQIVR4qE_1O5r6LcAH0wyYfXn7ONqkFVHuZIkrH7xIPPCvNEZhzV\"}"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f0c9be83-43cc-4585-bd94-798327a507bb","keyName":"e2e-rate-a-56f4c8","subscription":"e2e-rate-iso-a-56f4c8","tenant":"e2e-shared-a-5d8f8f","userId":"f0c9be83-43cc-4585-bd94-798327a507bb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\",\"requestedSubscription\":\"e2e-rate-iso-a-56f4c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56f4c8","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-56f4c8"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f0c9be83-43cc-4585-bd94-798327a507bb","keyName":"e2e-rate-a-56f4c8","selected_subscription":"e2e-rate-iso-a-56f4c8","selected_subscription_key":"ai-tenant-e2e-shared-a-5d8f8f/e2e-rate-iso-a-56f4c8@ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56f4c8","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58746","PortSpecifier":{"PortValue":58746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","method":"POST","path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58746","PortSpecifier":{"PortValue":58746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625610,"nanos":119461763},"http":{"id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ygtkkquJxQIVR4qE_1O5r6LcAH0wyYfXn7ONqkFVHuZIkrH7xIPPCvNEZhzV"}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ygtkkquJxQIVR4qE_1O5r6LcAH0wyYfXn7ONqkFVHuZIkrH7xIPPCvNEZhzV\"}"}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f0c9be83-43cc-4585-bd94-798327a507bb","keyName":"e2e-rate-a-56f4c8","subscription":"e2e-rate-iso-a-56f4c8","tenant":"e2e-shared-a-5d8f8f","userId":"f0c9be83-43cc-4585-bd94-798327a507bb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\",\"requestedSubscription\":\"e2e-rate-iso-a-56f4c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56f4c8","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-56f4c8"}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f0c9be83-43cc-4585-bd94-798327a507bb","keyName":"e2e-rate-a-56f4c8","selected_subscription":"e2e-rate-iso-a-56f4c8","selected_subscription_key":"ai-tenant-e2e-shared-a-5d8f8f/e2e-rate-iso-a-56f4c8@ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56f4c8","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58754","PortSpecifier":{"PortValue":58754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ec17753-6aa3-4548-8919-8320c5fff78d","method":"POST","path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58754","PortSpecifier":{"PortValue":58754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625611,"nanos":158455975},"http":{"id":"1ec17753-6aa3-4548-8919-8320c5fff78d","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ygtkkquJxQIVR4qE_1O5r6LcAH0wyYfXn7ONqkFVHuZIkrH7xIPPCvNEZhzV"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ygtkkquJxQIVR4qE_1O5r6LcAH0wyYfXn7ONqkFVHuZIkrH7xIPPCvNEZhzV\"}"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f0c9be83-43cc-4585-bd94-798327a507bb","keyName":"e2e-rate-a-56f4c8","subscription":"e2e-rate-iso-a-56f4c8","tenant":"e2e-shared-a-5d8f8f","userId":"f0c9be83-43cc-4585-bd94-798327a507bb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\",\"requestedSubscription\":\"e2e-rate-iso-a-56f4c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56f4c8","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-56f4c8"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f0c9be83-43cc-4585-bd94-798327a507bb","keyName":"e2e-rate-a-56f4c8","selected_subscription":"e2e-rate-iso-a-56f4c8","selected_subscription_key":"ai-tenant-e2e-shared-a-5d8f8f/e2e-rate-iso-a-56f4c8@ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56f4c8","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42038","PortSpecifier":{"PortValue":42038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","method":"POST","path":"/ai-tenant-e2e-shared-b-b20a51/rate-test-model-b20a51/v1/completions","host":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42038","PortSpecifier":{"PortValue":42038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625611,"nanos":194277631},"http":{"id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","method":"POST","headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b20a51/rate-test-model-b20a51/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4B1ol5FIxqZ1lrJt_7urfmbNkkY05jNumxtUpOxqD6tex8cX5u5s2yR6ZpZq"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b20a51.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4B1ol5FIxqZ1lrJt_7urfmbNkkY05jNumxtUpOxqD6tex8cX5u5s2yR6ZpZq\"}"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b20a51.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"91434548-cf29-4afc-a4a8-639167135b27","keyName":"e2e-rate-b-56f4c8","subscription":"e2e-rate-iso-b-56f4c8","tenant":"e2e-shared-b-b20a51","userId":"91434548-cf29-4afc-a4a8-639167135b27","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b20a51.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b20a51/rate-test-model-b20a51\",\"requestedSubscription\":\"e2e-rate-iso-b-56f4c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b20a51.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b20a51","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-56f4c8","namespace":"ai-tenant-e2e-shared-b-b20a51","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b20a51/rate-test-model-b20a51\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-56f4c8"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"91434548-cf29-4afc-a4a8-639167135b27","keyName":"e2e-rate-b-56f4c8","selected_subscription":"e2e-rate-iso-b-56f4c8","selected_subscription_key":"ai-tenant-e2e-shared-b-b20a51/e2e-rate-iso-b-56f4c8@ai-tenant-e2e-shared-b-b20a51/rate-test-model-b20a51","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b20a51","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-56f4c8","namespace":"ai-tenant-e2e-shared-b-b20a51","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b"}
{"level":"info","ts":"2026-07-09T19:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"}
{"level":"info","ts":"2026-07-09T19:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"info","ts":"2026-07-09T19:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d675d19490942c427b4f87a4f3d883a192f8ee77c46205fbbd20d02735de119"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8309f566e258e984ce9641577bd0970fc7a737e6596f6dc95d64bdea75adbd21"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac"}
{"level":"info","ts":"2026-07-09T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"}
{"level":"info","ts":"2026-07-09T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"}
{"level":"info","ts":"2026-07-09T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5eb2a9d3813086de86f6c30c5038293777cbaf6917e2c07daf90c0b1cb94651"}
{"level":"info","ts":"2026-07-09T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b"}
{"level":"info","ts":"2026-07-09T19:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2"}
{"level":"info","ts":"2026-07-09T19:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7"}
{"level":"info","ts":"2026-07-09T19:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"}
{"level":"info","ts":"2026-07-09T19:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"}