--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28a65367a942c93acbc815d721a38ec4d162b48e789e5422f51dba4ac3addcdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28a65367a942c93acbc815d721a38ec4d162b48e789e5422f51dba4ac3addcdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28a65367a942c93acbc815d721a38ec4d162b48e789e5422f51dba4ac3addcdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"814711f227227282d072f64a6202094bd3242cc227769266108149ad83999267","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c09ee5f80d343d70dc0e938e0b102d6651fcb76b906c73aeab8ba5d7f993d0cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c09ee5f80d343d70dc0e938e0b102d6651fcb76b906c73aeab8ba5d7f993d0cb"}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c09ee5f80d343d70dc0e938e0b102d6651fcb76b906c73aeab8ba5d7f993d0cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28a65367a942c93acbc815d721a38ec4d162b48e789e5422f51dba4ac3addcdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28a65367a942c93acbc815d721a38ec4d162b48e789e5422f51dba4ac3addcdb"}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28a65367a942c93acbc815d721a38ec4d162b48e789e5422f51dba4ac3addcdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c09ee5f80d343d70dc0e938e0b102d6651fcb76b906c73aeab8ba5d7f993d0cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c09ee5f80d343d70dc0e938e0b102d6651fcb76b906c73aeab8ba5d7f993d0cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814711f227227282d072f64a6202094bd3242cc227769266108149ad83999267"}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c09ee5f80d343d70dc0e938e0b102d6651fcb76b906c73aeab8ba5d7f993d0cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28a65367a942c93acbc815d721a38ec4d162b48e789e5422f51dba4ac3addcdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28a65367a942c93acbc815d721a38ec4d162b48e789e5422f51dba4ac3addcdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28a65367a942c93acbc815d721a38ec4d162b48e789e5422f51dba4ac3addcdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c09ee5f80d343d70dc0e938e0b102d6651fcb76b906c73aeab8ba5d7f993d0cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c09ee5f80d343d70dc0e938e0b102d6651fcb76b906c73aeab8ba5d7f993d0cb"}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c09ee5f80d343d70dc0e938e0b102d6651fcb76b906c73aeab8ba5d7f993d0cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28a65367a942c93acbc815d721a38ec4d162b48e789e5422f51dba4ac3addcdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28a65367a942c93acbc815d721a38ec4d162b48e789e5422f51dba4ac3addcdb"}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28a65367a942c93acbc815d721a38ec4d162b48e789e5422f51dba4ac3addcdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c09ee5f80d343d70dc0e938e0b102d6651fcb76b906c73aeab8ba5d7f993d0cb"}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c09ee5f80d343d70dc0e938e0b102d6651fcb76b906c73aeab8ba5d7f993d0cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c09ee5f80d343d70dc0e938e0b102d6651fcb76b906c73aeab8ba5d7f993d0cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c09ee5f80d343d70dc0e938e0b102d6651fcb76b906c73aeab8ba5d7f993d0cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28a65367a942c93acbc815d721a38ec4d162b48e789e5422f51dba4ac3addcdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28a65367a942c93acbc815d721a38ec4d162b48e789e5422f51dba4ac3addcdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173"}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28a65367a942c93acbc815d721a38ec4d162b48e789e5422f51dba4ac3addcdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28a65367a942c93acbc815d721a38ec4d162b48e789e5422f51dba4ac3addcdb"}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c09ee5f80d343d70dc0e938e0b102d6651fcb76b906c73aeab8ba5d7f993d0cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28a65367a942c93acbc815d721a38ec4d162b48e789e5422f51dba4ac3addcdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173"}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c09ee5f80d343d70dc0e938e0b102d6651fcb76b906c73aeab8ba5d7f993d0cb"}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28a65367a942c93acbc815d721a38ec4d162b48e789e5422f51dba4ac3addcdb"}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173"}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2da75928eb5650412cbfaca14718f9e5fc5c88e4e5eecbe05f0b72f3c3c2f49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2da75928eb5650412cbfaca14718f9e5fc5c88e4e5eecbe05f0b72f3c3c2f49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2da75928eb5650412cbfaca14718f9e5fc5c88e4e5eecbe05f0b72f3c3c2f49"}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2da75928eb5650412cbfaca14718f9e5fc5c88e4e5eecbe05f0b72f3c3c2f49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2da75928eb5650412cbfaca14718f9e5fc5c88e4e5eecbe05f0b72f3c3c2f49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a"}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2da75928eb5650412cbfaca14718f9e5fc5c88e4e5eecbe05f0b72f3c3c2f49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2da75928eb5650412cbfaca14718f9e5fc5c88e4e5eecbe05f0b72f3c3c2f49"}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2da75928eb5650412cbfaca14718f9e5fc5c88e4e5eecbe05f0b72f3c3c2f49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a"}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2da75928eb5650412cbfaca14718f9e5fc5c88e4e5eecbe05f0b72f3c3c2f49"}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a"}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a"}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e58725da644bc467c82f5dd7a991ba36792d5961725f499f0c665a16097b70b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a"}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e58725da644bc467c82f5dd7a991ba36792d5961725f499f0c665a16097b70b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e58725da644bc467c82f5dd7a991ba36792d5961725f499f0c665a16097b70b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e58725da644bc467c82f5dd7a991ba36792d5961725f499f0c665a16097b70b"}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e58725da644bc467c82f5dd7a991ba36792d5961725f499f0c665a16097b70b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:03:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:03:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e58725da644bc467c82f5dd7a991ba36792d5961725f499f0c665a16097b70b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e58725da644bc467c82f5dd7a991ba36792d5961725f499f0c665a16097b70b"}
{"level":"debug","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e58725da644bc467c82f5dd7a991ba36792d5961725f499f0c665a16097b70b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e58725da644bc467c82f5dd7a991ba36792d5961725f499f0c665a16097b70b"}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a"}
{"level":"debug","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9614b59aa452f6f6b3630233f997b908e6919a8df911b302db488558f2329d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:03:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:03:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9614b59aa452f6f6b3630233f997b908e6919a8df911b302db488558f2329d38"}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9614b59aa452f6f6b3630233f997b908e6919a8df911b302db488558f2329d38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e58725da644bc467c82f5dd7a991ba36792d5961725f499f0c665a16097b70b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:03:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:03:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e58725da644bc467c82f5dd7a991ba36792d5961725f499f0c665a16097b70b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e58725da644bc467c82f5dd7a991ba36792d5961725f499f0c665a16097b70b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0a6c5874e8015dcda076ecfb162df684a16f20a31576ce2ab940c5362d9ff79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:03:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:03:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0a6c5874e8015dcda076ecfb162df684a16f20a31576ce2ab940c5362d9ff79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9614b59aa452f6f6b3630233f997b908e6919a8df911b302db488558f2329d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:03:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:03:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9614b59aa452f6f6b3630233f997b908e6919a8df911b302db488558f2329d38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a6c5874e8015dcda076ecfb162df684a16f20a31576ce2ab940c5362d9ff79"}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9614b59aa452f6f6b3630233f997b908e6919a8df911b302db488558f2329d38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acfbb85a93de780926a24bf23a1f7404795c651066def6e50036454248acf4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:03:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:03:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acfbb85a93de780926a24bf23a1f7404795c651066def6e50036454248acf4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e58725da644bc467c82f5dd7a991ba36792d5961725f499f0c665a16097b70b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0a6c5874e8015dcda076ecfb162df684a16f20a31576ce2ab940c5362d9ff79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:03:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:03:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0a6c5874e8015dcda076ecfb162df684a16f20a31576ce2ab940c5362d9ff79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9614b59aa452f6f6b3630233f997b908e6919a8df911b302db488558f2329d38"}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0a6c5874e8015dcda076ecfb162df684a16f20a31576ce2ab940c5362d9ff79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9614b59aa452f6f6b3630233f997b908e6919a8df911b302db488558f2329d38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acfbb85a93de780926a24bf23a1f7404795c651066def6e50036454248acf4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:03:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:03:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acfbb85a93de780926a24bf23a1f7404795c651066def6e50036454248acf4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0a6c5874e8015dcda076ecfb162df684a16f20a31576ce2ab940c5362d9ff79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acfbb85a93de780926a24bf23a1f7404795c651066def6e50036454248acf4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acfbb85a93de780926a24bf23a1f7404795c651066def6e50036454248acf4f"}
{"level":"debug","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acfbb85a93de780926a24bf23a1f7404795c651066def6e50036454248acf4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:03:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:03:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acfbb85a93de780926a24bf23a1f7404795c651066def6e50036454248acf4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acfbb85a93de780926a24bf23a1f7404795c651066def6e50036454248acf4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acfbb85a93de780926a24bf23a1f7404795c651066def6e50036454248acf4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e58725da644bc467c82f5dd7a991ba36792d5961725f499f0c665a16097b70b"}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a6c5874e8015dcda076ecfb162df684a16f20a31576ce2ab940c5362d9ff79"}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9614b59aa452f6f6b3630233f997b908e6919a8df911b302db488558f2329d38"}
{"level":"info","ts":"2026-07-07T07:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acfbb85a93de780926a24bf23a1f7404795c651066def6e50036454248acf4f"}
{"level":"info","ts":"2026-07-07T07:03:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ef599f6-c92c-44c2-a199-9b08cecfdfcc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:39606","PortSpecifier":{"PortValue":39606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ef599f6-c92c-44c2-a199-9b08cecfdfcc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-9b5a3c.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:03:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ef599f6-c92c-44c2-a199-9b08cecfdfcc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:39606","PortSpecifier":{"PortValue":39606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783407814,"nanos":252972011},"http":{"id":"2ef599f6-c92c-44c2-a199-9b08cecfdfcc","method":"POST","headers":{":authority":"e2e-inf-a-9b5a3c.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:03:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2ef599f6-c92c-44c2-a199-9b08cecfdfcc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:03:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ef599f6-c92c-44c2-a199-9b08cecfdfcc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:03:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ef599f6-c92c-44c2-a199-9b08cecfdfcc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f96f9545527e976f869a7566d0b991461d9f7c71abacf546dc4b354ed3c54dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-9b5a3c.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:03:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ef599f6-c92c-44c2-a199-9b08cecfdfcc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:03:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ef599f6-c92c-44c2-a199-9b08cecfdfcc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:03:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ef599f6-c92c-44c2-a199-9b08cecfdfcc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-9b5a3c/test-model-9b5a3c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:03:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ef599f6-c92c-44c2-a199-9b08cecfdfcc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:03:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ef599f6-c92c-44c2-a199-9b08cecfdfcc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:03:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ef599f6-c92c-44c2-a199-9b08cecfdfcc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:03:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ef599f6-c92c-44c2-a199-9b08cecfdfcc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:03:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ef599f6-c92c-44c2-a199-9b08cecfdfcc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea022607-728b-4ed9-af93-c3d1ca0ada97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40760","PortSpecifier":{"PortValue":40760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea022607-728b-4ed9-af93-c3d1ca0ada97","method":"POST","path":"/ai-tenant-e2e-inf-a-9b5a3c/test-model-9b5a3c/v1/chat/completions","host":"e2e-inf-a-9b5a3c.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea022607-728b-4ed9-af93-c3d1ca0ada97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40760","PortSpecifier":{"PortValue":40760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783407818,"nanos":316627377},"http":{"id":"ea022607-728b-4ed9-af93-c3d1ca0ada97","method":"POST","headers":{":authority":"e2e-inf-a-9b5a3c.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-a-9b5a3c/test-model-9b5a3c/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea022607-728b-4ed9-af93-c3d1ca0ada97","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KtfKCkEUAflEkMEd_kPNxSOFOlnXJXbcYp7syEVEGnJQhCa5TS2kmTc40SBn"}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ea022607-728b-4ed9-af93-c3d1ca0ada97","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-9b5a3c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KtfKCkEUAflEkMEd_kPNxSOFOlnXJXbcYp7syEVEGnJQhCa5TS2kmTc40SBn\"}"}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ea022607-728b-4ed9-af93-c3d1ca0ada97","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-9b5a3c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0794e1d4-380b-4adf-959d-dbbe5a2e28a9","keyName":"e2e-tenant-inference-9b5a3c","subscription":"test-model-9b5a3c-sub","tenant":"e2e-inf-a-9b5a3c","userId":"0794e1d4-380b-4adf-959d-dbbe5a2e28a9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ea022607-728b-4ed9-af93-c3d1ca0ada97","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-9b5a3c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-9b5a3c/test-model-9b5a3c\",\"requestedSubscription\":\"test-model-9b5a3c-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ea022607-728b-4ed9-af93-c3d1ca0ada97","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-9b5a3c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-9b5a3c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-9b5a3c-sub","namespace":"ai-tenant-e2e-inf-a-9b5a3c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea022607-728b-4ed9-af93-c3d1ca0ada97","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea022607-728b-4ed9-af93-c3d1ca0ada97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea022607-728b-4ed9-af93-c3d1ca0ada97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea022607-728b-4ed9-af93-c3d1ca0ada97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-9b5a3c/test-model-9b5a3c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea022607-728b-4ed9-af93-c3d1ca0ada97","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea022607-728b-4ed9-af93-c3d1ca0ada97","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea022607-728b-4ed9-af93-c3d1ca0ada97","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea022607-728b-4ed9-af93-c3d1ca0ada97","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-9b5a3c-sub"}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea022607-728b-4ed9-af93-c3d1ca0ada97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0794e1d4-380b-4adf-959d-dbbe5a2e28a9","keyName":"e2e-tenant-inference-9b5a3c","selected_subscription":"test-model-9b5a3c-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-9b5a3c/test-model-9b5a3c-sub@ai-tenant-e2e-inf-a-9b5a3c/test-model-9b5a3c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-9b5a3c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-9b5a3c-sub","namespace":"ai-tenant-e2e-inf-a-9b5a3c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea022607-728b-4ed9-af93-c3d1ca0ada97","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea022607-728b-4ed9-af93-c3d1ca0ada97","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7f4dd9b-96a8-47a9-9679-843c65e8fd96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40762","PortSpecifier":{"PortValue":40762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7f4dd9b-96a8-47a9-9679-843c65e8fd96","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-9b5a3c.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7f4dd9b-96a8-47a9-9679-843c65e8fd96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40762","PortSpecifier":{"PortValue":40762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783407818,"nanos":637390035},"http":{"id":"f7f4dd9b-96a8-47a9-9679-843c65e8fd96","method":"POST","headers":{":authority":"e2e-inf-a-9b5a3c.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7f4dd9b-96a8-47a9-9679-843c65e8fd96","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7f4dd9b-96a8-47a9-9679-843c65e8fd96","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7f4dd9b-96a8-47a9-9679-843c65e8fd96","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f96f9545527e976f869a7566d0b991461d9f7c71abacf546dc4b354ed3c54dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-9b5a3c.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7f4dd9b-96a8-47a9-9679-843c65e8fd96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7f4dd9b-96a8-47a9-9679-843c65e8fd96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7f4dd9b-96a8-47a9-9679-843c65e8fd96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-9b5a3c/test-model-9b5a3c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7f4dd9b-96a8-47a9-9679-843c65e8fd96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7f4dd9b-96a8-47a9-9679-843c65e8fd96","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7f4dd9b-96a8-47a9-9679-843c65e8fd96","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7f4dd9b-96a8-47a9-9679-843c65e8fd96","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7f4dd9b-96a8-47a9-9679-843c65e8fd96","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92af067d-ef64-48c3-a08c-90f2d5c7e946","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37314","PortSpecifier":{"PortValue":37314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92af067d-ef64-48c3-a08c-90f2d5c7e946","method":"POST","path":"/ai-tenant-e2e-inf-b-da1ed1/test-model-da1ed1/v1/chat/completions","host":"e2e-inf-b-da1ed1.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92af067d-ef64-48c3-a08c-90f2d5c7e946","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37314","PortSpecifier":{"PortValue":37314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783407818,"nanos":675504443},"http":{"id":"92af067d-ef64-48c3-a08c-90f2d5c7e946","method":"POST","headers":{":authority":"e2e-inf-b-da1ed1.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-da1ed1/test-model-da1ed1/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92af067d-ef64-48c3-a08c-90f2d5c7e946","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yYtIDSvBG1luF4vQ_Uy72Gl9DYoPWEcaUF35zlSbk2oZO6VaHVKNcBzE8Fqd"}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"92af067d-ef64-48c3-a08c-90f2d5c7e946","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-da1ed1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yYtIDSvBG1luF4vQ_Uy72Gl9DYoPWEcaUF35zlSbk2oZO6VaHVKNcBzE8Fqd\"}"}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"92af067d-ef64-48c3-a08c-90f2d5c7e946","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-da1ed1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"92af067d-ef64-48c3-a08c-90f2d5c7e946","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-da1ed1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92af067d-ef64-48c3-a08c-90f2d5c7e946","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-da1ed1.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-da1ed1/test-model-da1ed1/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92af067d-ef64-48c3-a08c-90f2d5c7e946","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"92af067d-ef64-48c3-a08c-90f2d5c7e946","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92af067d-ef64-48c3-a08c-90f2d5c7e946","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T07:03:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92af067d-ef64-48c3-a08c-90f2d5c7e946","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T07:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/918aad97802c7f8a583188555c677b887b731a7bae6bf127fe0918e5a223fcb1"}
{"level":"info","ts":"2026-07-07T07:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28a65367a942c93acbc815d721a38ec4d162b48e789e5422f51dba4ac3addcdb"}
{"level":"info","ts":"2026-07-07T07:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08060aad136ea95f49be62fe1d04d40cb0037b6ab5dddfbd1f836207d324aa58"}
{"level":"info","ts":"2026-07-07T07:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/814711f227227282d072f64a6202094bd3242cc227769266108149ad83999267"}
{"level":"info","ts":"2026-07-07T07:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8075f2dd9d298ce2c60b6da660c0cb3f57523cac9887135450330083e41e26aa"}
{"level":"info","ts":"2026-07-07T07:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9614b59aa452f6f6b3630233f997b908e6919a8df911b302db488558f2329d38"}
{"level":"info","ts":"2026-07-07T07:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e58725da644bc467c82f5dd7a991ba36792d5961725f499f0c665a16097b70b"}
{"level":"info","ts":"2026-07-07T07:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0a6c5874e8015dcda076ecfb162df684a16f20a31576ce2ab940c5362d9ff79"}
{"level":"info","ts":"2026-07-07T07:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd12d6b8d6d41a800ff2c471fbc5790fdf290135463d3aed412c599255990256"}
{"level":"info","ts":"2026-07-07T07:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a35ee308aa339c308e272d7ec4dbe09b73620e79053669bceed53959816f478"}
{"level":"info","ts":"2026-07-07T07:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a29ce6f06eabc88a59d1b804af17146b8b2189b8c2aad86714489710688cd3f"}
{"level":"info","ts":"2026-07-07T07:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9f3a86bef790bce49ccba5c62b7ff11922518f4adfdd236883fb20c8e700173"}
{"level":"info","ts":"2026-07-07T07:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26165bedea698b5bac6e70e9a6c52fb75a2099ed95bf27aa0c5d0e310a087233"}
{"level":"info","ts":"2026-07-07T07:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/861a26b6f1a99d12730b648453756ec0882b6081ef6c228e7647bc2aa2a83818"}
{"level":"info","ts":"2026-07-07T07:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f3d93a8c8ac2d571472db757248a21d3007f0da574fa19749571a351c208f1a"}
{"level":"info","ts":"2026-07-07T07:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f96f9545527e976f869a7566d0b991461d9f7c71abacf546dc4b354ed3c54dc"}
{"level":"info","ts":"2026-07-07T07:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2da75928eb5650412cbfaca14718f9e5fc5c88e4e5eecbe05f0b72f3c3c2f49"}
{"level":"info","ts":"2026-07-07T07:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d30d7ea9bbfde728dfaa394645215b93f249fc90e97bf4ae994d9d9375dad0aa"}
{"level":"info","ts":"2026-07-07T07:04:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2acfbb85a93de780926a24bf23a1f7404795c651066def6e50036454248acf4f"}
{"level":"info","ts":"2026-07-07T07:04:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c09ee5f80d343d70dc0e938e0b102d6651fcb76b906c73aeab8ba5d7f993d0cb"}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e"}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e"}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429"}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e"}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429"}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e"}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e"}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429"}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e"}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429"}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e"}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429"}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429"}
{"level":"debug","ts":"2026-07-07T07:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429"}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6"}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6"}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6"}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093"}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6"}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093"}
{"level":"error","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6"}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093"}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6"}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093"}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:04:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6"}
{"level":"info","ts":"2026-07-07T07:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093"}
{"level":"info","ts":"2026-07-07T07:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/817d2fbb093bd17a18eba3c8be1eac899b9c90064c896b72a1ab41a70bee200e"}
{"level":"info","ts":"2026-07-07T07:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7c3a4b1a368cd2bd01c6185f6e3e5a9e6f37777a26182c6dc5dddbca94ed429"}
{"level":"info","ts":"2026-07-07T07:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d97bacb15c2eb1f428bd66340abb0b0b30e873c3dc7201dae7232bcd56bbd093"}
{"level":"info","ts":"2026-07-07T07:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3650c4b1308fbffef9197751398f770fef3a443308320a35cf9bcc1eebd7cfe6"}
{"level":"debug","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777"}
{"level":"debug","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777"}
{"level":"info","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777"}
{"level":"info","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777"}
{"level":"debug","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777"}
{"level":"info","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777"}
{"level":"debug","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777"}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acfcaa19b60f46d8580d68e185ea141b91b5cb78e0dd79c7c8e3b9f12902aa0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acfcaa19b60f46d8580d68e185ea141b91b5cb78e0dd79c7c8e3b9f12902aa0b"}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acfcaa19b60f46d8580d68e185ea141b91b5cb78e0dd79c7c8e3b9f12902aa0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acfcaa19b60f46d8580d68e185ea141b91b5cb78e0dd79c7c8e3b9f12902aa0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acfcaa19b60f46d8580d68e185ea141b91b5cb78e0dd79c7c8e3b9f12902aa0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acfcaa19b60f46d8580d68e185ea141b91b5cb78e0dd79c7c8e3b9f12902aa0b"}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acfcaa19b60f46d8580d68e185ea141b91b5cb78e0dd79c7c8e3b9f12902aa0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acfcaa19b60f46d8580d68e185ea141b91b5cb78e0dd79c7c8e3b9f12902aa0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acfcaa19b60f46d8580d68e185ea141b91b5cb78e0dd79c7c8e3b9f12902aa0b"}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f"}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f"}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f"}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f"}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f"}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f8802fcdfc89dd0507a032ff955ebedfa5961672a488bda97494f40c35acd46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f8802fcdfc89dd0507a032ff955ebedfa5961672a488bda97494f40c35acd46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f8802fcdfc89dd0507a032ff955ebedfa5961672a488bda97494f40c35acd46","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f8802fcdfc89dd0507a032ff955ebedfa5961672a488bda97494f40c35acd46"}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f8802fcdfc89dd0507a032ff955ebedfa5961672a488bda97494f40c35acd46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f8802fcdfc89dd0507a032ff955ebedfa5961672a488bda97494f40c35acd46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f8802fcdfc89dd0507a032ff955ebedfa5961672a488bda97494f40c35acd46","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f8802fcdfc89dd0507a032ff955ebedfa5961672a488bda97494f40c35acd46","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f"}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f8802fcdfc89dd0507a032ff955ebedfa5961672a488bda97494f40c35acd46"}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5923c61cd017b145dc6d44b9089e10063ed21c192dc4af971bc5ecb278bbbcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe"}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5923c61cd017b145dc6d44b9089e10063ed21c192dc4af971bc5ecb278bbbcb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5923c61cd017b145dc6d44b9089e10063ed21c192dc4af971bc5ecb278bbbcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5923c61cd017b145dc6d44b9089e10063ed21c192dc4af971bc5ecb278bbbcb9"}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5923c61cd017b145dc6d44b9089e10063ed21c192dc4af971bc5ecb278bbbcb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5923c61cd017b145dc6d44b9089e10063ed21c192dc4af971bc5ecb278bbbcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5923c61cd017b145dc6d44b9089e10063ed21c192dc4af971bc5ecb278bbbcb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe"}
{"level":"error","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5923c61cd017b145dc6d44b9089e10063ed21c192dc4af971bc5ecb278bbbcb9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5923c61cd017b145dc6d44b9089e10063ed21c192dc4af971bc5ecb278bbbcb9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5923c61cd017b145dc6d44b9089e10063ed21c192dc4af971bc5ecb278bbbcb9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5923c61cd017b145dc6d44b9089e10063ed21c192dc4af971bc5ecb278bbbcb9"}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5923c61cd017b145dc6d44b9089e10063ed21c192dc4af971bc5ecb278bbbcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5923c61cd017b145dc6d44b9089e10063ed21c192dc4af971bc5ecb278bbbcb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5923c61cd017b145dc6d44b9089e10063ed21c192dc4af971bc5ecb278bbbcb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5923c61cd017b145dc6d44b9089e10063ed21c192dc4af971bc5ecb278bbbcb9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5923c61cd017b145dc6d44b9089e10063ed21c192dc4af971bc5ecb278bbbcb9"}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00573bc416aa469e8b0ba591b1407cdced910760c4229def3a3e90446c48b2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00573bc416aa469e8b0ba591b1407cdced910760c4229def3a3e90446c48b2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00573bc416aa469e8b0ba591b1407cdced910760c4229def3a3e90446c48b2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00573bc416aa469e8b0ba591b1407cdced910760c4229def3a3e90446c48b2d4"}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00573bc416aa469e8b0ba591b1407cdced910760c4229def3a3e90446c48b2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00573bc416aa469e8b0ba591b1407cdced910760c4229def3a3e90446c48b2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00573bc416aa469e8b0ba591b1407cdced910760c4229def3a3e90446c48b2d4"}
{"level":"error","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"00573bc416aa469e8b0ba591b1407cdced910760c4229def3a3e90446c48b2d4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"00573bc416aa469e8b0ba591b1407cdced910760c4229def3a3e90446c48b2d4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00573bc416aa469e8b0ba591b1407cdced910760c4229def3a3e90446c48b2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00573bc416aa469e8b0ba591b1407cdced910760c4229def3a3e90446c48b2d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00573bc416aa469e8b0ba591b1407cdced910760c4229def3a3e90446c48b2d4"}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"568d1ae92ff1032c4786149b9a8e070eb6398578e6b3a36dcb656ecfb6b147ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/568d1ae92ff1032c4786149b9a8e070eb6398578e6b3a36dcb656ecfb6b147ef"}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"568d1ae92ff1032c4786149b9a8e070eb6398578e6b3a36dcb656ecfb6b147ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe"}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"568d1ae92ff1032c4786149b9a8e070eb6398578e6b3a36dcb656ecfb6b147ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00573bc416aa469e8b0ba591b1407cdced910760c4229def3a3e90446c48b2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00573bc416aa469e8b0ba591b1407cdced910760c4229def3a3e90446c48b2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/568d1ae92ff1032c4786149b9a8e070eb6398578e6b3a36dcb656ecfb6b147ef"}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00573bc416aa469e8b0ba591b1407cdced910760c4229def3a3e90446c48b2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"568d1ae92ff1032c4786149b9a8e070eb6398578e6b3a36dcb656ecfb6b147ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["568d1ae92ff1032c4786149b9a8e070eb6398578e6b3a36dcb656ecfb6b147ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"568d1ae92ff1032c4786149b9a8e070eb6398578e6b3a36dcb656ecfb6b147ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00573bc416aa469e8b0ba591b1407cdced910760c4229def3a3e90446c48b2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"568d1ae92ff1032c4786149b9a8e070eb6398578e6b3a36dcb656ecfb6b147ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe"}
{"level":"debug","ts":"2026-07-07T07:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00573bc416aa469e8b0ba591b1407cdced910760c4229def3a3e90446c48b2d4"}
{"level":"info","ts":"2026-07-07T07:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/568d1ae92ff1032c4786149b9a8e070eb6398578e6b3a36dcb656ecfb6b147ef"}
{"level":"info","ts":"2026-07-07T07:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe"}
{"level":"debug","ts":"2026-07-07T07:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1"}
{"level":"info","ts":"2026-07-07T07:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1"}
{"level":"debug","ts":"2026-07-07T07:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1"}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1"}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1"}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1"}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1"}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3"}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3"}
{"level":"error","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3"}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3"}
{"level":"error","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777ac6ed07bcd31d92c998f68374304ed8d3f0e28efa311be45c7c52bae5a323","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777ac6ed07bcd31d92c998f68374304ed8d3f0e28efa311be45c7c52bae5a323"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"777ac6ed07bcd31d92c998f68374304ed8d3f0e28efa311be45c7c52bae5a323","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777ac6ed07bcd31d92c998f68374304ed8d3f0e28efa311be45c7c52bae5a323"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777ac6ed07bcd31d92c998f68374304ed8d3f0e28efa311be45c7c52bae5a323","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["777ac6ed07bcd31d92c998f68374304ed8d3f0e28efa311be45c7c52bae5a323"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"777ac6ed07bcd31d92c998f68374304ed8d3f0e28efa311be45c7c52bae5a323","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"777ac6ed07bcd31d92c998f68374304ed8d3f0e28efa311be45c7c52bae5a323","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d"}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777ac6ed07bcd31d92c998f68374304ed8d3f0e28efa311be45c7c52bae5a323"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e920364fc486257f262378f4142b44655305b206dcd7efd1390889507f64a6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e920364fc486257f262378f4142b44655305b206dcd7efd1390889507f64a6d"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e920364fc486257f262378f4142b44655305b206dcd7efd1390889507f64a6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e920364fc486257f262378f4142b44655305b206dcd7efd1390889507f64a6d"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e920364fc486257f262378f4142b44655305b206dcd7efd1390889507f64a6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e920364fc486257f262378f4142b44655305b206dcd7efd1390889507f64a6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e920364fc486257f262378f4142b44655305b206dcd7efd1390889507f64a6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66b6c5dab8df56d48d2f10abaa9023af31650af47adfbd31a30357d4e4ed0157"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66b6c5dab8df56d48d2f10abaa9023af31650af47adfbd31a30357d4e4ed0157","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66b6c5dab8df56d48d2f10abaa9023af31650af47adfbd31a30357d4e4ed0157"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e920364fc486257f262378f4142b44655305b206dcd7efd1390889507f64a6d"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66b6c5dab8df56d48d2f10abaa9023af31650af47adfbd31a30357d4e4ed0157","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e920364fc486257f262378f4142b44655305b206dcd7efd1390889507f64a6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66b6c5dab8df56d48d2f10abaa9023af31650af47adfbd31a30357d4e4ed0157"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66b6c5dab8df56d48d2f10abaa9023af31650af47adfbd31a30357d4e4ed0157","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d14683ad6c4cf7f55a4c07e4ce486d42f58eba6f44a11141cdb98645ca80f06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d14683ad6c4cf7f55a4c07e4ce486d42f58eba6f44a11141cdb98645ca80f06"}
{"level":"info","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d14683ad6c4cf7f55a4c07e4ce486d42f58eba6f44a11141cdb98645ca80f06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d14683ad6c4cf7f55a4c07e4ce486d42f58eba6f44a11141cdb98645ca80f06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:06:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d14683ad6c4cf7f55a4c07e4ce486d42f58eba6f44a11141cdb98645ca80f06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"}
{"level":"info","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d14683ad6c4cf7f55a4c07e4ce486d42f58eba6f44a11141cdb98645ca80f06"}
{"level":"error","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8d14683ad6c4cf7f55a4c07e4ce486d42f58eba6f44a11141cdb98645ca80f06","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8d14683ad6c4cf7f55a4c07e4ce486d42f58eba6f44a11141cdb98645ca80f06\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:07:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:07:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb8a0a017fc63d682efcc7d09c135ca7cc082e207380172202b77053088f66aa"}
{"level":"info","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df"}
{"level":"info","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb8a0a017fc63d682efcc7d09c135ca7cc082e207380172202b77053088f66aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:07:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:07:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb8a0a017fc63d682efcc7d09c135ca7cc082e207380172202b77053088f66aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb8a0a017fc63d682efcc7d09c135ca7cc082e207380172202b77053088f66aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d14683ad6c4cf7f55a4c07e4ce486d42f58eba6f44a11141cdb98645ca80f06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:07:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:07:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d14683ad6c4cf7f55a4c07e4ce486d42f58eba6f44a11141cdb98645ca80f06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"}
{"level":"info","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb8a0a017fc63d682efcc7d09c135ca7cc082e207380172202b77053088f66aa"}
{"level":"info","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d14683ad6c4cf7f55a4c07e4ce486d42f58eba6f44a11141cdb98645ca80f06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:07:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:07:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d14683ad6c4cf7f55a4c07e4ce486d42f58eba6f44a11141cdb98645ca80f06"}
{"level":"info","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb8a0a017fc63d682efcc7d09c135ca7cc082e207380172202b77053088f66aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d14683ad6c4cf7f55a4c07e4ce486d42f58eba6f44a11141cdb98645ca80f06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:07:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:07:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df"}
{"level":"info","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df"}
{"level":"debug","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:07:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:07:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:07:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:07:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df"}
{"level":"info","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df"}
{"level":"debug","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:07:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:07:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:07:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df"}
{"level":"info","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91b6aae9-3e26-4bbf-8533-a7e41c52da9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55120","PortSpecifier":{"PortValue":55120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91b6aae9-3e26-4bbf-8533-a7e41c52da9c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91b6aae9-3e26-4bbf-8533-a7e41c52da9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55120","PortSpecifier":{"PortValue":55120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408022,"nanos":479025452},"http":{"id":"91b6aae9-3e26-4bbf-8533-a7e41c52da9c","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"91b6aae9-3e26-4bbf-8533-a7e41c52da9c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91b6aae9-3e26-4bbf-8533-a7e41c52da9c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91b6aae9-3e26-4bbf-8533-a7e41c52da9c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91b6aae9-3e26-4bbf-8533-a7e41c52da9c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91b6aae9-3e26-4bbf-8533-a7e41c52da9c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91b6aae9-3e26-4bbf-8533-a7e41c52da9c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/auth-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"91b6aae9-3e26-4bbf-8533-a7e41c52da9c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91b6aae9-3e26-4bbf-8533-a7e41c52da9c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91b6aae9-3e26-4bbf-8533-a7e41c52da9c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91b6aae9-3e26-4bbf-8533-a7e41c52da9c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91b6aae9-3e26-4bbf-8533-a7e41c52da9c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd48f36f-9937-48be-b771-eafdb4ed7721","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57174","PortSpecifier":{"PortValue":57174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd48f36f-9937-48be-b771-eafdb4ed7721","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd48f36f-9937-48be-b771-eafdb4ed7721","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57174","PortSpecifier":{"PortValue":57174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408022,"nanos":542820701},"http":{"id":"cd48f36f-9937-48be-b771-eafdb4ed7721","method":"POST","headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd48f36f-9937-48be-b771-eafdb4ed7721","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd48f36f-9937-48be-b771-eafdb4ed7721","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd48f36f-9937-48be-b771-eafdb4ed7721","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd48f36f-9937-48be-b771-eafdb4ed7721","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd48f36f-9937-48be-b771-eafdb4ed7721","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd48f36f-9937-48be-b771-eafdb4ed7721","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c72c9a/auth-test-model-c72c9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd48f36f-9937-48be-b771-eafdb4ed7721","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd48f36f-9937-48be-b771-eafdb4ed7721","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd48f36f-9937-48be-b771-eafdb4ed7721","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd48f36f-9937-48be-b771-eafdb4ed7721","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd48f36f-9937-48be-b771-eafdb4ed7721","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eca8d54a-d9ed-46c3-8d76-acf65eb6869f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55136","PortSpecifier":{"PortValue":55136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eca8d54a-d9ed-46c3-8d76-acf65eb6869f","method":"GET","path":"/maas-api/v1/api-keys/a40e45e3-9998-4c05-9a2c-416ce43fc4db","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eca8d54a-d9ed-46c3-8d76-acf65eb6869f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55136","PortSpecifier":{"PortValue":55136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408022,"nanos":622581918},"http":{"id":"eca8d54a-d9ed-46c3-8d76-acf65eb6869f","method":"GET","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a40e45e3-9998-4c05-9a2c-416ce43fc4db",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eca8d54a-d9ed-46c3-8d76-acf65eb6869f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eca8d54a-d9ed-46c3-8d76-acf65eb6869f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eca8d54a-d9ed-46c3-8d76-acf65eb6869f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a40e45e3-9998-4c05-9a2c-416ce43fc4db",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eca8d54a-d9ed-46c3-8d76-acf65eb6869f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eca8d54a-d9ed-46c3-8d76-acf65eb6869f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eca8d54a-d9ed-46c3-8d76-acf65eb6869f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/auth-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eca8d54a-d9ed-46c3-8d76-acf65eb6869f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eca8d54a-d9ed-46c3-8d76-acf65eb6869f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eca8d54a-d9ed-46c3-8d76-acf65eb6869f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eca8d54a-d9ed-46c3-8d76-acf65eb6869f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eca8d54a-d9ed-46c3-8d76-acf65eb6869f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d52cd417-bec6-46a3-a0ad-83789dcdf3e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57184","PortSpecifier":{"PortValue":57184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d52cd417-bec6-46a3-a0ad-83789dcdf3e7","method":"GET","path":"/maas-api/v1/api-keys/7a9398c1-3eac-41e9-a9ba-16a201ef2a5b","host":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d52cd417-bec6-46a3-a0ad-83789dcdf3e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57184","PortSpecifier":{"PortValue":57184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408022,"nanos":664433810},"http":{"id":"d52cd417-bec6-46a3-a0ad-83789dcdf3e7","method":"GET","headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7a9398c1-3eac-41e9-a9ba-16a201ef2a5b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d52cd417-bec6-46a3-a0ad-83789dcdf3e7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d52cd417-bec6-46a3-a0ad-83789dcdf3e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d52cd417-bec6-46a3-a0ad-83789dcdf3e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7a9398c1-3eac-41e9-a9ba-16a201ef2a5b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d52cd417-bec6-46a3-a0ad-83789dcdf3e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d52cd417-bec6-46a3-a0ad-83789dcdf3e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d52cd417-bec6-46a3-a0ad-83789dcdf3e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c72c9a/auth-test-model-c72c9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d52cd417-bec6-46a3-a0ad-83789dcdf3e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d52cd417-bec6-46a3-a0ad-83789dcdf3e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d52cd417-bec6-46a3-a0ad-83789dcdf3e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d52cd417-bec6-46a3-a0ad-83789dcdf3e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d52cd417-bec6-46a3-a0ad-83789dcdf3e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36b1c51a-a3e7-4a24-8128-d2353e36c326","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54044","PortSpecifier":{"PortValue":54044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36b1c51a-a3e7-4a24-8128-d2353e36c326","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36b1c51a-a3e7-4a24-8128-d2353e36c326","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54044","PortSpecifier":{"PortValue":54044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408037,"nanos":795237833},"http":{"id":"36b1c51a-a3e7-4a24-8128-d2353e36c326","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36b1c51a-a3e7-4a24-8128-d2353e36c326","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36b1c51a-a3e7-4a24-8128-d2353e36c326","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36b1c51a-a3e7-4a24-8128-d2353e36c326","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36b1c51a-a3e7-4a24-8128-d2353e36c326","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36b1c51a-a3e7-4a24-8128-d2353e36c326","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36b1c51a-a3e7-4a24-8128-d2353e36c326","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/auth-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36b1c51a-a3e7-4a24-8128-d2353e36c326","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36b1c51a-a3e7-4a24-8128-d2353e36c326","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36b1c51a-a3e7-4a24-8128-d2353e36c326","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36b1c51a-a3e7-4a24-8128-d2353e36c326","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36b1c51a-a3e7-4a24-8128-d2353e36c326","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31c75025-efad-4ab0-a025-7a060ef8ee14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50968","PortSpecifier":{"PortValue":50968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31c75025-efad-4ab0-a025-7a060ef8ee14","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31c75025-efad-4ab0-a025-7a060ef8ee14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50968","PortSpecifier":{"PortValue":50968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408037,"nanos":832977032},"http":{"id":"31c75025-efad-4ab0-a025-7a060ef8ee14","method":"POST","headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"31c75025-efad-4ab0-a025-7a060ef8ee14","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31c75025-efad-4ab0-a025-7a060ef8ee14","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31c75025-efad-4ab0-a025-7a060ef8ee14","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c75025-efad-4ab0-a025-7a060ef8ee14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c75025-efad-4ab0-a025-7a060ef8ee14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c75025-efad-4ab0-a025-7a060ef8ee14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c72c9a/auth-test-model-c72c9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"31c75025-efad-4ab0-a025-7a060ef8ee14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31c75025-efad-4ab0-a025-7a060ef8ee14","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31c75025-efad-4ab0-a025-7a060ef8ee14","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31c75025-efad-4ab0-a025-7a060ef8ee14","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31c75025-efad-4ab0-a025-7a060ef8ee14","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d14dc06-5966-4b13-815b-07bd38974754","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54060","PortSpecifier":{"PortValue":54060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d14dc06-5966-4b13-815b-07bd38974754","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d14dc06-5966-4b13-815b-07bd38974754","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54060","PortSpecifier":{"PortValue":54060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408037,"nanos":869261052},"http":{"id":"5d14dc06-5966-4b13-815b-07bd38974754","method":"GET","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d14dc06-5966-4b13-815b-07bd38974754","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-167qR4dUjkuVVFSZS_9n6mc9XA20sT3hVTjZ8ZwffCvLnmbo5W47soeUm15vd"}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5d14dc06-5966-4b13-815b-07bd38974754","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-167qR4dUjkuVVFSZS_9n6mc9XA20sT3hVTjZ8ZwffCvLnmbo5W47soeUm15vd\"}"}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5d14dc06-5966-4b13-815b-07bd38974754","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e2648ffc-45c4-41aa-9bbe-6a13e390f219","keyName":"e2e-auth-iso-a-f62d0e","subscription":"e2e-auth-iso-6c5f22","tenant":"e2e-shared-a-94448f","userId":"e2648ffc-45c4-41aa-9bbe-6a13e390f219","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d14dc06-5966-4b13-815b-07bd38974754","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d14dc06-5966-4b13-815b-07bd38974754","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d14dc06-5966-4b13-815b-07bd38974754","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d14dc06-5966-4b13-815b-07bd38974754","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/auth-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5d14dc06-5966-4b13-815b-07bd38974754","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d14dc06-5966-4b13-815b-07bd38974754","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d14dc06-5966-4b13-815b-07bd38974754","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d14dc06-5966-4b13-815b-07bd38974754","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-6c5f22"}
{"level":"info","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d14dc06-5966-4b13-815b-07bd38974754","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:07:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d14dc06-5966-4b13-815b-07bd38974754","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0db691ed-8323-417b-a7f1-dcabea59dcc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43178","PortSpecifier":{"PortValue":43178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0db691ed-8323-417b-a7f1-dcabea59dcc5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0db691ed-8323-417b-a7f1-dcabea59dcc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43178","PortSpecifier":{"PortValue":43178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408055,"nanos":64418540},"http":{"id":"0db691ed-8323-417b-a7f1-dcabea59dcc5","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0db691ed-8323-417b-a7f1-dcabea59dcc5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0db691ed-8323-417b-a7f1-dcabea59dcc5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0db691ed-8323-417b-a7f1-dcabea59dcc5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0db691ed-8323-417b-a7f1-dcabea59dcc5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0db691ed-8323-417b-a7f1-dcabea59dcc5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0db691ed-8323-417b-a7f1-dcabea59dcc5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/auth-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0db691ed-8323-417b-a7f1-dcabea59dcc5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0db691ed-8323-417b-a7f1-dcabea59dcc5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0db691ed-8323-417b-a7f1-dcabea59dcc5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0db691ed-8323-417b-a7f1-dcabea59dcc5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0db691ed-8323-417b-a7f1-dcabea59dcc5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5e21b4c-a20e-4fdb-bb9d-8de455a5c117","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37498","PortSpecifier":{"PortValue":37498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5e21b4c-a20e-4fdb-bb9d-8de455a5c117","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5e21b4c-a20e-4fdb-bb9d-8de455a5c117","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37498","PortSpecifier":{"PortValue":37498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408055,"nanos":102511946},"http":{"id":"e5e21b4c-a20e-4fdb-bb9d-8de455a5c117","method":"POST","headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e5e21b4c-a20e-4fdb-bb9d-8de455a5c117","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5e21b4c-a20e-4fdb-bb9d-8de455a5c117","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5e21b4c-a20e-4fdb-bb9d-8de455a5c117","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5e21b4c-a20e-4fdb-bb9d-8de455a5c117","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5e21b4c-a20e-4fdb-bb9d-8de455a5c117","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5e21b4c-a20e-4fdb-bb9d-8de455a5c117","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c72c9a/auth-test-model-c72c9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e5e21b4c-a20e-4fdb-bb9d-8de455a5c117","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5e21b4c-a20e-4fdb-bb9d-8de455a5c117","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5e21b4c-a20e-4fdb-bb9d-8de455a5c117","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5e21b4c-a20e-4fdb-bb9d-8de455a5c117","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5e21b4c-a20e-4fdb-bb9d-8de455a5c117","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39da0c3a-589a-4d3f-9d73-887b4b59b78d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37508","PortSpecifier":{"PortValue":37508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39da0c3a-589a-4d3f-9d73-887b4b59b78d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39da0c3a-589a-4d3f-9d73-887b4b59b78d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37508","PortSpecifier":{"PortValue":37508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408055,"nanos":139111840},"http":{"id":"39da0c3a-589a-4d3f-9d73-887b4b59b78d","method":"GET","headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39da0c3a-589a-4d3f-9d73-887b4b59b78d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EbFZsIOUARfFtTzO_IGaV5F7YU8zsffWNuyqFeWQtSVxZ2pwbuR5B0GyTsR1"}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39da0c3a-589a-4d3f-9d73-887b4b59b78d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c72c9a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EbFZsIOUARfFtTzO_IGaV5F7YU8zsffWNuyqFeWQtSVxZ2pwbuR5B0GyTsR1\"}"}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39da0c3a-589a-4d3f-9d73-887b4b59b78d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c72c9a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39da0c3a-589a-4d3f-9d73-887b4b59b78d","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39da0c3a-589a-4d3f-9d73-887b4b59b78d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"39da0c3a-589a-4d3f-9d73-887b4b59b78d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39da0c3a-589a-4d3f-9d73-887b4b59b78d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T07:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39da0c3a-589a-4d3f-9d73-887b4b59b78d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3309febf-8e4d-4750-b806-a0863ab91617","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38516","PortSpecifier":{"PortValue":38516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3309febf-8e4d-4750-b806-a0863ab91617","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3309febf-8e4d-4750-b806-a0863ab91617","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38516","PortSpecifier":{"PortValue":38516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408071,"nanos":296211944},"http":{"id":"3309febf-8e4d-4750-b806-a0863ab91617","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3309febf-8e4d-4750-b806-a0863ab91617","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3309febf-8e4d-4750-b806-a0863ab91617","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3309febf-8e4d-4750-b806-a0863ab91617","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3309febf-8e4d-4750-b806-a0863ab91617","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3309febf-8e4d-4750-b806-a0863ab91617","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3309febf-8e4d-4750-b806-a0863ab91617","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/auth-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3309febf-8e4d-4750-b806-a0863ab91617","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3309febf-8e4d-4750-b806-a0863ab91617","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3309febf-8e4d-4750-b806-a0863ab91617","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3309febf-8e4d-4750-b806-a0863ab91617","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3309febf-8e4d-4750-b806-a0863ab91617","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4d591fe-94fb-4490-a5c3-b9a9aca5eb01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:39818","PortSpecifier":{"PortValue":39818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4d591fe-94fb-4490-a5c3-b9a9aca5eb01","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4d591fe-94fb-4490-a5c3-b9a9aca5eb01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:39818","PortSpecifier":{"PortValue":39818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408071,"nanos":334416624},"http":{"id":"d4d591fe-94fb-4490-a5c3-b9a9aca5eb01","method":"POST","headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d4d591fe-94fb-4490-a5c3-b9a9aca5eb01","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4d591fe-94fb-4490-a5c3-b9a9aca5eb01","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4d591fe-94fb-4490-a5c3-b9a9aca5eb01","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4d591fe-94fb-4490-a5c3-b9a9aca5eb01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4d591fe-94fb-4490-a5c3-b9a9aca5eb01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4d591fe-94fb-4490-a5c3-b9a9aca5eb01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c72c9a/auth-test-model-c72c9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d4d591fe-94fb-4490-a5c3-b9a9aca5eb01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4d591fe-94fb-4490-a5c3-b9a9aca5eb01","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4d591fe-94fb-4490-a5c3-b9a9aca5eb01","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4d591fe-94fb-4490-a5c3-b9a9aca5eb01","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4d591fe-94fb-4490-a5c3-b9a9aca5eb01","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"269ec09d-0fb7-4fcf-a89b-03365a00e225","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38522","PortSpecifier":{"PortValue":38522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"269ec09d-0fb7-4fcf-a89b-03365a00e225","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"269ec09d-0fb7-4fcf-a89b-03365a00e225","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38522","PortSpecifier":{"PortValue":38522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408071,"nanos":374140240},"http":{"id":"269ec09d-0fb7-4fcf-a89b-03365a00e225","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"269ec09d-0fb7-4fcf-a89b-03365a00e225","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"269ec09d-0fb7-4fcf-a89b-03365a00e225","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"269ec09d-0fb7-4fcf-a89b-03365a00e225","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"269ec09d-0fb7-4fcf-a89b-03365a00e225","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"269ec09d-0fb7-4fcf-a89b-03365a00e225","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"269ec09d-0fb7-4fcf-a89b-03365a00e225","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/auth-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"269ec09d-0fb7-4fcf-a89b-03365a00e225","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"269ec09d-0fb7-4fcf-a89b-03365a00e225","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"269ec09d-0fb7-4fcf-a89b-03365a00e225","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"269ec09d-0fb7-4fcf-a89b-03365a00e225","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"269ec09d-0fb7-4fcf-a89b-03365a00e225","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d24e3cd-1014-486b-84bb-a51e16efdb6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:39828","PortSpecifier":{"PortValue":39828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d24e3cd-1014-486b-84bb-a51e16efdb6f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d24e3cd-1014-486b-84bb-a51e16efdb6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:39828","PortSpecifier":{"PortValue":39828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408071,"nanos":408598431},"http":{"id":"3d24e3cd-1014-486b-84bb-a51e16efdb6f","method":"POST","headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d24e3cd-1014-486b-84bb-a51e16efdb6f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d24e3cd-1014-486b-84bb-a51e16efdb6f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d24e3cd-1014-486b-84bb-a51e16efdb6f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d24e3cd-1014-486b-84bb-a51e16efdb6f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d24e3cd-1014-486b-84bb-a51e16efdb6f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d24e3cd-1014-486b-84bb-a51e16efdb6f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c72c9a/auth-test-model-c72c9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d24e3cd-1014-486b-84bb-a51e16efdb6f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d24e3cd-1014-486b-84bb-a51e16efdb6f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d24e3cd-1014-486b-84bb-a51e16efdb6f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d24e3cd-1014-486b-84bb-a51e16efdb6f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:07:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d24e3cd-1014-486b-84bb-a51e16efdb6f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc65b0a2-a561-452f-af19-07f3d01ba697","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56510","PortSpecifier":{"PortValue":56510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc65b0a2-a561-452f-af19-07f3d01ba697","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc65b0a2-a561-452f-af19-07f3d01ba697","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56510","PortSpecifier":{"PortValue":56510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408088,"nanos":633203956},"http":{"id":"bc65b0a2-a561-452f-af19-07f3d01ba697","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bc65b0a2-a561-452f-af19-07f3d01ba697","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc65b0a2-a561-452f-af19-07f3d01ba697","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc65b0a2-a561-452f-af19-07f3d01ba697","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc65b0a2-a561-452f-af19-07f3d01ba697","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc65b0a2-a561-452f-af19-07f3d01ba697","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc65b0a2-a561-452f-af19-07f3d01ba697","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/auth-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bc65b0a2-a561-452f-af19-07f3d01ba697","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc65b0a2-a561-452f-af19-07f3d01ba697","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc65b0a2-a561-452f-af19-07f3d01ba697","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc65b0a2-a561-452f-af19-07f3d01ba697","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc65b0a2-a561-452f-af19-07f3d01ba697","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de649615-eff7-4535-859e-2d0f0b9db7d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49956","PortSpecifier":{"PortValue":49956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de649615-eff7-4535-859e-2d0f0b9db7d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de649615-eff7-4535-859e-2d0f0b9db7d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49956","PortSpecifier":{"PortValue":49956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408088,"nanos":667817133},"http":{"id":"de649615-eff7-4535-859e-2d0f0b9db7d3","method":"POST","headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"de649615-eff7-4535-859e-2d0f0b9db7d3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de649615-eff7-4535-859e-2d0f0b9db7d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de649615-eff7-4535-859e-2d0f0b9db7d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de649615-eff7-4535-859e-2d0f0b9db7d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de649615-eff7-4535-859e-2d0f0b9db7d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de649615-eff7-4535-859e-2d0f0b9db7d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c72c9a/auth-test-model-c72c9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"de649615-eff7-4535-859e-2d0f0b9db7d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de649615-eff7-4535-859e-2d0f0b9db7d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de649615-eff7-4535-859e-2d0f0b9db7d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de649615-eff7-4535-859e-2d0f0b9db7d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de649615-eff7-4535-859e-2d0f0b9db7d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15ce7efe-4c2e-45d6-a996-a67ae1955597","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49972","PortSpecifier":{"PortValue":49972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15ce7efe-4c2e-45d6-a996-a67ae1955597","method":"GET","path":"/maas-api/v1/api-keys/92f93160-a98d-4374-a6d9-19a8c5407766","host":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15ce7efe-4c2e-45d6-a996-a67ae1955597","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49972","PortSpecifier":{"PortValue":49972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408088,"nanos":708819129},"http":{"id":"15ce7efe-4c2e-45d6-a996-a67ae1955597","method":"GET","headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/92f93160-a98d-4374-a6d9-19a8c5407766",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"15ce7efe-4c2e-45d6-a996-a67ae1955597","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15ce7efe-4c2e-45d6-a996-a67ae1955597","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15ce7efe-4c2e-45d6-a996-a67ae1955597","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/92f93160-a98d-4374-a6d9-19a8c5407766",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15ce7efe-4c2e-45d6-a996-a67ae1955597","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15ce7efe-4c2e-45d6-a996-a67ae1955597","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15ce7efe-4c2e-45d6-a996-a67ae1955597","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c72c9a/auth-test-model-c72c9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"15ce7efe-4c2e-45d6-a996-a67ae1955597","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15ce7efe-4c2e-45d6-a996-a67ae1955597","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15ce7efe-4c2e-45d6-a996-a67ae1955597","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15ce7efe-4c2e-45d6-a996-a67ae1955597","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15ce7efe-4c2e-45d6-a996-a67ae1955597","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2703fb4b-5356-471f-ba8f-a50fdae2665c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56512","PortSpecifier":{"PortValue":56512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2703fb4b-5356-471f-ba8f-a50fdae2665c","method":"GET","path":"/maas-api/v1/api-keys/92f93160-a98d-4374-a6d9-19a8c5407766","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2703fb4b-5356-471f-ba8f-a50fdae2665c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56512","PortSpecifier":{"PortValue":56512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408088,"nanos":743133183},"http":{"id":"2703fb4b-5356-471f-ba8f-a50fdae2665c","method":"GET","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/92f93160-a98d-4374-a6d9-19a8c5407766",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2703fb4b-5356-471f-ba8f-a50fdae2665c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2703fb4b-5356-471f-ba8f-a50fdae2665c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2703fb4b-5356-471f-ba8f-a50fdae2665c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/92f93160-a98d-4374-a6d9-19a8c5407766",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2703fb4b-5356-471f-ba8f-a50fdae2665c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2703fb4b-5356-471f-ba8f-a50fdae2665c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2703fb4b-5356-471f-ba8f-a50fdae2665c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/auth-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2703fb4b-5356-471f-ba8f-a50fdae2665c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2703fb4b-5356-471f-ba8f-a50fdae2665c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2703fb4b-5356-471f-ba8f-a50fdae2665c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2703fb4b-5356-471f-ba8f-a50fdae2665c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:08:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2703fb4b-5356-471f-ba8f-a50fdae2665c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b780a747-49ae-4be2-9dd9-7c0a90f0c166","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42908","PortSpecifier":{"PortValue":42908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b780a747-49ae-4be2-9dd9-7c0a90f0c166","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b780a747-49ae-4be2-9dd9-7c0a90f0c166","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42908","PortSpecifier":{"PortValue":42908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408111,"nanos":146864390},"http":{"id":"b780a747-49ae-4be2-9dd9-7c0a90f0c166","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b780a747-49ae-4be2-9dd9-7c0a90f0c166","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b780a747-49ae-4be2-9dd9-7c0a90f0c166","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b780a747-49ae-4be2-9dd9-7c0a90f0c166","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b780a747-49ae-4be2-9dd9-7c0a90f0c166","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b780a747-49ae-4be2-9dd9-7c0a90f0c166","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b780a747-49ae-4be2-9dd9-7c0a90f0c166","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/auth-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b780a747-49ae-4be2-9dd9-7c0a90f0c166","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b780a747-49ae-4be2-9dd9-7c0a90f0c166","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b780a747-49ae-4be2-9dd9-7c0a90f0c166","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b780a747-49ae-4be2-9dd9-7c0a90f0c166","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b780a747-49ae-4be2-9dd9-7c0a90f0c166","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"056a156d-a671-4d2a-b321-10cb7642f296","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37830","PortSpecifier":{"PortValue":37830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"056a156d-a671-4d2a-b321-10cb7642f296","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"056a156d-a671-4d2a-b321-10cb7642f296","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37830","PortSpecifier":{"PortValue":37830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408111,"nanos":184636501},"http":{"id":"056a156d-a671-4d2a-b321-10cb7642f296","method":"POST","headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"056a156d-a671-4d2a-b321-10cb7642f296","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"056a156d-a671-4d2a-b321-10cb7642f296","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"056a156d-a671-4d2a-b321-10cb7642f296","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"056a156d-a671-4d2a-b321-10cb7642f296","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"056a156d-a671-4d2a-b321-10cb7642f296","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"056a156d-a671-4d2a-b321-10cb7642f296","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c72c9a/auth-test-model-c72c9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"056a156d-a671-4d2a-b321-10cb7642f296","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"056a156d-a671-4d2a-b321-10cb7642f296","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"056a156d-a671-4d2a-b321-10cb7642f296","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"056a156d-a671-4d2a-b321-10cb7642f296","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"056a156d-a671-4d2a-b321-10cb7642f296","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"767db6a9-b638-44c9-be3c-ba5a368c28b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42912","PortSpecifier":{"PortValue":42912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"767db6a9-b638-44c9-be3c-ba5a368c28b3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"767db6a9-b638-44c9-be3c-ba5a368c28b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42912","PortSpecifier":{"PortValue":42912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408111,"nanos":224497288},"http":{"id":"767db6a9-b638-44c9-be3c-ba5a368c28b3","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"767db6a9-b638-44c9-be3c-ba5a368c28b3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yBkbKHdBfiuefMnw_QWjO4un1GuWB15d6Gd6kz0NH6zgMxKG8fN93vtwzqmH"}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"767db6a9-b638-44c9-be3c-ba5a368c28b3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yBkbKHdBfiuefMnw_QWjO4un1GuWB15d6Gd6kz0NH6zgMxKG8fN93vtwzqmH\"}"}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"767db6a9-b638-44c9-be3c-ba5a368c28b3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2c84d111-cdc0-448b-8fdb-ed160c5745c6","keyName":"e2e-auth-iso-a-16d0f7","subscription":"e2e-auth-iso-f2d2e6","tenant":"e2e-shared-a-94448f","userId":"2c84d111-cdc0-448b-8fdb-ed160c5745c6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"767db6a9-b638-44c9-be3c-ba5a368c28b3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"767db6a9-b638-44c9-be3c-ba5a368c28b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"767db6a9-b638-44c9-be3c-ba5a368c28b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"767db6a9-b638-44c9-be3c-ba5a368c28b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/auth-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"767db6a9-b638-44c9-be3c-ba5a368c28b3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"767db6a9-b638-44c9-be3c-ba5a368c28b3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f2d2e6"}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"767db6a9-b638-44c9-be3c-ba5a368c28b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"767db6a9-b638-44c9-be3c-ba5a368c28b3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"767db6a9-b638-44c9-be3c-ba5a368c28b3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:08:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"767db6a9-b638-44c9-be3c-ba5a368c28b3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83373e698653287d0579401db64053c2d82f0e3ff7ec007b0f9f1088bbbbddbe"}
{"level":"info","ts":"2026-07-07T07:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00573bc416aa469e8b0ba591b1407cdced910760c4229def3a3e90446c48b2d4"}
{"level":"info","ts":"2026-07-07T07:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac20c3e35faa752f42869326ae85b1ea0571c8f84106e3341c51dd345d234777"}
{"level":"info","ts":"2026-07-07T07:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66b6c5dab8df56d48d2f10abaa9023af31650af47adfbd31a30357d4e4ed0157"}
{"level":"info","ts":"2026-07-07T07:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/777ac6ed07bcd31d92c998f68374304ed8d3f0e28efa311be45c7c52bae5a323"}
{"level":"info","ts":"2026-07-07T07:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6af5a48dd7fc4a7cb7881e39ea43e126d80673158b7922e8a1aeba0cae590c5d"}
{"level":"info","ts":"2026-07-07T07:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31c4b3bab999c699958250dab4ed51e8439a7b02defa253435e90a57c156e9df"}
{"level":"info","ts":"2026-07-07T07:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/568d1ae92ff1032c4786149b9a8e070eb6398578e6b3a36dcb656ecfb6b147ef"}
{"level":"info","ts":"2026-07-07T07:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ff4c848f0eb12d371950ed311199124c4294319aaa8e062ba0041c784100ef1"}
{"level":"info","ts":"2026-07-07T07:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f8802fcdfc89dd0507a032ff955ebedfa5961672a488bda97494f40c35acd46"}
{"level":"info","ts":"2026-07-07T07:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acfcaa19b60f46d8580d68e185ea141b91b5cb78e0dd79c7c8e3b9f12902aa0b"}
{"level":"info","ts":"2026-07-07T07:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5923c61cd017b145dc6d44b9089e10063ed21c192dc4af971bc5ecb278bbbcb9"}
{"level":"info","ts":"2026-07-07T07:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d14683ad6c4cf7f55a4c07e4ce486d42f58eba6f44a11141cdb98645ca80f06"}
{"level":"info","ts":"2026-07-07T07:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1122175447df3b1bed40b8296a3208a26d639fe540dc6c3b3afca2055b131b7f"}
{"level":"info","ts":"2026-07-07T07:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb8a0a017fc63d682efcc7d09c135ca7cc082e207380172202b77053088f66aa"}
{"level":"info","ts":"2026-07-07T07:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5be6816cb85fe6b4a396ba32d7819d28c7c331d45f94135c55ead6c41061be3"}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f06f9223ef958924a7977f7dec000271196dcbe1069624b9c97b4f302a7fd515","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f06f9223ef958924a7977f7dec000271196dcbe1069624b9c97b4f302a7fd515"}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f06f9223ef958924a7977f7dec000271196dcbe1069624b9c97b4f302a7fd515","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f06f9223ef958924a7977f7dec000271196dcbe1069624b9c97b4f302a7fd515","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f06f9223ef958924a7977f7dec000271196dcbe1069624b9c97b4f302a7fd515"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f06f9223ef958924a7977f7dec000271196dcbe1069624b9c97b4f302a7fd515","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f06f9223ef958924a7977f7dec000271196dcbe1069624b9c97b4f302a7fd515"}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f06f9223ef958924a7977f7dec000271196dcbe1069624b9c97b4f302a7fd515","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f06f9223ef958924a7977f7dec000271196dcbe1069624b9c97b4f302a7fd515"}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2077a6ed9ede7887bee1c869b944f7997c432b73d3aef454163aa081032277b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2077a6ed9ede7887bee1c869b944f7997c432b73d3aef454163aa081032277b8"}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2077a6ed9ede7887bee1c869b944f7997c432b73d3aef454163aa081032277b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2077a6ed9ede7887bee1c869b944f7997c432b73d3aef454163aa081032277b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2077a6ed9ede7887bee1c869b944f7997c432b73d3aef454163aa081032277b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2077a6ed9ede7887bee1c869b944f7997c432b73d3aef454163aa081032277b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2077a6ed9ede7887bee1c869b944f7997c432b73d3aef454163aa081032277b8"}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2077a6ed9ede7887bee1c869b944f7997c432b73d3aef454163aa081032277b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2077a6ed9ede7887bee1c869b944f7997c432b73d3aef454163aa081032277b8"}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743"}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743"}
{"level":"debug","ts":"2026-07-07T07:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743"}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92"}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92"}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92"}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7948f9d78d13b8fa36add9aa9c72cb619c5c14612ec8501429dc5864d7a4b3a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7948f9d78d13b8fa36add9aa9c72cb619c5c14612ec8501429dc5864d7a4b3a7"}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7948f9d78d13b8fa36add9aa9c72cb619c5c14612ec8501429dc5864d7a4b3a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7948f9d78d13b8fa36add9aa9c72cb619c5c14612ec8501429dc5864d7a4b3a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7948f9d78d13b8fa36add9aa9c72cb619c5c14612ec8501429dc5864d7a4b3a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92"}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7948f9d78d13b8fa36add9aa9c72cb619c5c14612ec8501429dc5864d7a4b3a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7948f9d78d13b8fa36add9aa9c72cb619c5c14612ec8501429dc5864d7a4b3a7"}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7948f9d78d13b8fa36add9aa9c72cb619c5c14612ec8501429dc5864d7a4b3a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92"}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7948f9d78d13b8fa36add9aa9c72cb619c5c14612ec8501429dc5864d7a4b3a7"}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92"}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1"}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1"}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"}
{"level":"info","ts":"2026-07-07T07:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1"}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd"}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd"}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd"}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd"}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd"}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd"}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd"}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ed53999c714fbcc40b1b267e41961d890540c83f89ce9f678c3c8ee696e1c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ed53999c714fbcc40b1b267e41961d890540c83f89ce9f678c3c8ee696e1c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ed53999c714fbcc40b1b267e41961d890540c83f89ce9f678c3c8ee696e1c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ed53999c714fbcc40b1b267e41961d890540c83f89ce9f678c3c8ee696e1c3"}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ed53999c714fbcc40b1b267e41961d890540c83f89ce9f678c3c8ee696e1c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ed53999c714fbcc40b1b267e41961d890540c83f89ce9f678c3c8ee696e1c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"27ed53999c714fbcc40b1b267e41961d890540c83f89ce9f678c3c8ee696e1c3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"27ed53999c714fbcc40b1b267e41961d890540c83f89ce9f678c3c8ee696e1c3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ed53999c714fbcc40b1b267e41961d890540c83f89ce9f678c3c8ee696e1c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ed53999c714fbcc40b1b267e41961d890540c83f89ce9f678c3c8ee696e1c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ed53999c714fbcc40b1b267e41961d890540c83f89ce9f678c3c8ee696e1c3"}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ed53999c714fbcc40b1b267e41961d890540c83f89ce9f678c3c8ee696e1c3"}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4338ee58bf8fd11f833cb2d679a213462aa6542550bbedfcec51e8f569535457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4338ee58bf8fd11f833cb2d679a213462aa6542550bbedfcec51e8f569535457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4338ee58bf8fd11f833cb2d679a213462aa6542550bbedfcec51e8f569535457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4338ee58bf8fd11f833cb2d679a213462aa6542550bbedfcec51e8f569535457"}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4338ee58bf8fd11f833cb2d679a213462aa6542550bbedfcec51e8f569535457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ed53999c714fbcc40b1b267e41961d890540c83f89ce9f678c3c8ee696e1c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27ed53999c714fbcc40b1b267e41961d890540c83f89ce9f678c3c8ee696e1c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97"}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ed53999c714fbcc40b1b267e41961d890540c83f89ce9f678c3c8ee696e1c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4338ee58bf8fd11f833cb2d679a213462aa6542550bbedfcec51e8f569535457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4338ee58bf8fd11f833cb2d679a213462aa6542550bbedfcec51e8f569535457"}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ed53999c714fbcc40b1b267e41961d890540c83f89ce9f678c3c8ee696e1c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4338ee58bf8fd11f833cb2d679a213462aa6542550bbedfcec51e8f569535457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4338ee58bf8fd11f833cb2d679a213462aa6542550bbedfcec51e8f569535457"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97"}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4338ee58bf8fd11f833cb2d679a213462aa6542550bbedfcec51e8f569535457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4338ee58bf8fd11f833cb2d679a213462aa6542550bbedfcec51e8f569535457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ed53999c714fbcc40b1b267e41961d890540c83f89ce9f678c3c8ee696e1c3"}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97"}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4338ee58bf8fd11f833cb2d679a213462aa6542550bbedfcec51e8f569535457"}
{"level":"error","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de"}
{"level":"info","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97"}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de"}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213"}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de"}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213"}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de"}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213"}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7"}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de"}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7"}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213"}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de"}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7"}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff"}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7"}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff"}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7"}
{"level":"error","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff"}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff"}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff"}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97"}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97"}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743"}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97"}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743"}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ed53999c714fbcc40b1b267e41961d890540c83f89ce9f678c3c8ee696e1c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ed53999c714fbcc40b1b267e41961d890540c83f89ce9f678c3c8ee696e1c3"}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f06f9223ef958924a7977f7dec000271196dcbe1069624b9c97b4f302a7fd515","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f06f9223ef958924a7977f7dec000271196dcbe1069624b9c97b4f302a7fd515"}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd"}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e920364fc486257f262378f4142b44655305b206dcd7efd1390889507f64a6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e920364fc486257f262378f4142b44655305b206dcd7efd1390889507f64a6d"}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2077a6ed9ede7887bee1c869b944f7997c432b73d3aef454163aa081032277b8"}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2077a6ed9ede7887bee1c869b944f7997c432b73d3aef454163aa081032277b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1"}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4338ee58bf8fd11f833cb2d679a213462aa6542550bbedfcec51e8f569535457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1"}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4338ee58bf8fd11f833cb2d679a213462aa6542550bbedfcec51e8f569535457"}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1"}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1"}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de"}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1"}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92"}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213"}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff"}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213"}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7"}
{"level":"debug","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7948f9d78d13b8fa36add9aa9c72cb619c5c14612ec8501429dc5864d7a4b3a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"}
{"level":"info","ts":"2026-07-07T07:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7948f9d78d13b8fa36add9aa9c72cb619c5c14612ec8501429dc5864d7a4b3a7"}
{"level":"info","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06c2d2af-789f-4fd6-8253-863cbe44e46f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53038","PortSpecifier":{"PortValue":53038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06c2d2af-789f-4fd6-8253-863cbe44e46f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06c2d2af-789f-4fd6-8253-863cbe44e46f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53038","PortSpecifier":{"PortValue":53038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408215,"nanos":940827912},"http":{"id":"06c2d2af-789f-4fd6-8253-863cbe44e46f","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06c2d2af-789f-4fd6-8253-863cbe44e46f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06c2d2af-789f-4fd6-8253-863cbe44e46f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06c2d2af-789f-4fd6-8253-863cbe44e46f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06c2d2af-789f-4fd6-8253-863cbe44e46f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06c2d2af-789f-4fd6-8253-863cbe44e46f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06c2d2af-789f-4fd6-8253-863cbe44e46f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/sub-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06c2d2af-789f-4fd6-8253-863cbe44e46f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06c2d2af-789f-4fd6-8253-863cbe44e46f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06c2d2af-789f-4fd6-8253-863cbe44e46f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06c2d2af-789f-4fd6-8253-863cbe44e46f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06c2d2af-789f-4fd6-8253-863cbe44e46f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d440f513-d3c8-4a34-a428-2ebe743898b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37956","PortSpecifier":{"PortValue":37956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d440f513-d3c8-4a34-a428-2ebe743898b2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d440f513-d3c8-4a34-a428-2ebe743898b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37956","PortSpecifier":{"PortValue":37956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408215,"nanos":982949129},"http":{"id":"d440f513-d3c8-4a34-a428-2ebe743898b2","method":"POST","headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d440f513-d3c8-4a34-a428-2ebe743898b2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d440f513-d3c8-4a34-a428-2ebe743898b2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d440f513-d3c8-4a34-a428-2ebe743898b2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d440f513-d3c8-4a34-a428-2ebe743898b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d440f513-d3c8-4a34-a428-2ebe743898b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d440f513-d3c8-4a34-a428-2ebe743898b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c72c9a/sub-test-model-c72c9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d440f513-d3c8-4a34-a428-2ebe743898b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d440f513-d3c8-4a34-a428-2ebe743898b2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d440f513-d3c8-4a34-a428-2ebe743898b2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d440f513-d3c8-4a34-a428-2ebe743898b2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d440f513-d3c8-4a34-a428-2ebe743898b2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e22d440-7aa2-43d9-b5b5-b10d3c812538","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53044","PortSpecifier":{"PortValue":53044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e22d440-7aa2-43d9-b5b5-b10d3c812538","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e22d440-7aa2-43d9-b5b5-b10d3c812538","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53044","PortSpecifier":{"PortValue":53044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408216,"nanos":22449442},"http":{"id":"4e22d440-7aa2-43d9-b5b5-b10d3c812538","method":"GET","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e22d440-7aa2-43d9-b5b5-b10d3c812538","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wl0KwWTiUr2uVg3B_Th2xdJCoZLmoIUrvahwCVtYoN3yQQIg7dgOINDqWzuK"}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e22d440-7aa2-43d9-b5b5-b10d3c812538","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wl0KwWTiUr2uVg3B_Th2xdJCoZLmoIUrvahwCVtYoN3yQQIg7dgOINDqWzuK\"}"}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e22d440-7aa2-43d9-b5b5-b10d3c812538","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6b6c2cba-8d1c-47d1-b16c-ee4112d626ce","keyName":"e2e-sub-iso-100542","subscription":"e2e-a-only-70e263","tenant":"e2e-shared-a-94448f","userId":"6b6c2cba-8d1c-47d1-b16c-ee4112d626ce","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e22d440-7aa2-43d9-b5b5-b10d3c812538","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e22d440-7aa2-43d9-b5b5-b10d3c812538","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e22d440-7aa2-43d9-b5b5-b10d3c812538","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e22d440-7aa2-43d9-b5b5-b10d3c812538","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/sub-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e22d440-7aa2-43d9-b5b5-b10d3c812538","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-70e263"}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e22d440-7aa2-43d9-b5b5-b10d3c812538","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e22d440-7aa2-43d9-b5b5-b10d3c812538","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e22d440-7aa2-43d9-b5b5-b10d3c812538","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e22d440-7aa2-43d9-b5b5-b10d3c812538","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e22d440-7aa2-43d9-b5b5-b10d3c812538","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"000a77e4-d0ea-4d3d-87ec-6571f57ebd8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37960","PortSpecifier":{"PortValue":37960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"000a77e4-d0ea-4d3d-87ec-6571f57ebd8d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"000a77e4-d0ea-4d3d-87ec-6571f57ebd8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37960","PortSpecifier":{"PortValue":37960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408216,"nanos":64462925},"http":{"id":"000a77e4-d0ea-4d3d-87ec-6571f57ebd8d","method":"GET","headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"000a77e4-d0ea-4d3d-87ec-6571f57ebd8d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NSGSc5zQMS94ot0Z_R6gjiOrCCNfJrAVYK0hJGETcmLC65gW9PGEYihG4hQU"}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"000a77e4-d0ea-4d3d-87ec-6571f57ebd8d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c72c9a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NSGSc5zQMS94ot0Z_R6gjiOrCCNfJrAVYK0hJGETcmLC65gW9PGEYihG4hQU\"}"}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"000a77e4-d0ea-4d3d-87ec-6571f57ebd8d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c72c9a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"850e7dcf-3b1f-44b9-882d-206584c64109","keyName":"e2e-sub-iso-7e6bdd","subscription":"e2e-b-only-70e263","tenant":"e2e-shared-b-c72c9a","userId":"850e7dcf-3b1f-44b9-882d-206584c64109","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"000a77e4-d0ea-4d3d-87ec-6571f57ebd8d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"000a77e4-d0ea-4d3d-87ec-6571f57ebd8d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"000a77e4-d0ea-4d3d-87ec-6571f57ebd8d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"000a77e4-d0ea-4d3d-87ec-6571f57ebd8d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c72c9a/sub-test-model-c72c9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"000a77e4-d0ea-4d3d-87ec-6571f57ebd8d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"000a77e4-d0ea-4d3d-87ec-6571f57ebd8d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-70e263"}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"000a77e4-d0ea-4d3d-87ec-6571f57ebd8d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"000a77e4-d0ea-4d3d-87ec-6571f57ebd8d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"000a77e4-d0ea-4d3d-87ec-6571f57ebd8d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:10:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"000a77e4-d0ea-4d3d-87ec-6571f57ebd8d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c90b6072-e5a2-4f7e-937a-f09cea603524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37144","PortSpecifier":{"PortValue":37144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c90b6072-e5a2-4f7e-937a-f09cea603524","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c90b6072-e5a2-4f7e-937a-f09cea603524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37144","PortSpecifier":{"PortValue":37144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408226,"nanos":3001185},"http":{"id":"c90b6072-e5a2-4f7e-937a-f09cea603524","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c90b6072-e5a2-4f7e-937a-f09cea603524","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c90b6072-e5a2-4f7e-937a-f09cea603524","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c90b6072-e5a2-4f7e-937a-f09cea603524","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c90b6072-e5a2-4f7e-937a-f09cea603524","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c90b6072-e5a2-4f7e-937a-f09cea603524","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c90b6072-e5a2-4f7e-937a-f09cea603524","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/sub-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c90b6072-e5a2-4f7e-937a-f09cea603524","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c90b6072-e5a2-4f7e-937a-f09cea603524","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c90b6072-e5a2-4f7e-937a-f09cea603524","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c90b6072-e5a2-4f7e-937a-f09cea603524","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c90b6072-e5a2-4f7e-937a-f09cea603524","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b94c89b8-0b6f-4059-b8d2-eac57a9f80d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33366","PortSpecifier":{"PortValue":33366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b94c89b8-0b6f-4059-b8d2-eac57a9f80d1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b94c89b8-0b6f-4059-b8d2-eac57a9f80d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33366","PortSpecifier":{"PortValue":33366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408226,"nanos":40537050},"http":{"id":"b94c89b8-0b6f-4059-b8d2-eac57a9f80d1","method":"POST","headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b94c89b8-0b6f-4059-b8d2-eac57a9f80d1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b94c89b8-0b6f-4059-b8d2-eac57a9f80d1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b94c89b8-0b6f-4059-b8d2-eac57a9f80d1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b94c89b8-0b6f-4059-b8d2-eac57a9f80d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b94c89b8-0b6f-4059-b8d2-eac57a9f80d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b94c89b8-0b6f-4059-b8d2-eac57a9f80d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c72c9a/sub-test-model-c72c9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b94c89b8-0b6f-4059-b8d2-eac57a9f80d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b94c89b8-0b6f-4059-b8d2-eac57a9f80d1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b94c89b8-0b6f-4059-b8d2-eac57a9f80d1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b94c89b8-0b6f-4059-b8d2-eac57a9f80d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b94c89b8-0b6f-4059-b8d2-eac57a9f80d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9baf7c4-f9f3-400d-a31a-b131c63d8582","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37150","PortSpecifier":{"PortValue":37150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9baf7c4-f9f3-400d-a31a-b131c63d8582","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9baf7c4-f9f3-400d-a31a-b131c63d8582","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37150","PortSpecifier":{"PortValue":37150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408226,"nanos":77224229},"http":{"id":"c9baf7c4-f9f3-400d-a31a-b131c63d8582","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9baf7c4-f9f3-400d-a31a-b131c63d8582","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7JOMfnaIRBOqSh6L_ardM1aW3pAAvX2q5V8abh3InsQ7MGIzfWH3gfmePtLv"}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9baf7c4-f9f3-400d-a31a-b131c63d8582","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7JOMfnaIRBOqSh6L_ardM1aW3pAAvX2q5V8abh3InsQ7MGIzfWH3gfmePtLv\"}"}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9baf7c4-f9f3-400d-a31a-b131c63d8582","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3c056e89-aedb-4afe-b397-7890b32b4ffb","keyName":"e2e-sub-iso-fff124","subscription":"e2e-shared-sub-644e66","tenant":"e2e-shared-a-94448f","userId":"3c056e89-aedb-4afe-b397-7890b32b4ffb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9baf7c4-f9f3-400d-a31a-b131c63d8582","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9baf7c4-f9f3-400d-a31a-b131c63d8582","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9baf7c4-f9f3-400d-a31a-b131c63d8582","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9baf7c4-f9f3-400d-a31a-b131c63d8582","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/sub-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9baf7c4-f9f3-400d-a31a-b131c63d8582","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9baf7c4-f9f3-400d-a31a-b131c63d8582","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9baf7c4-f9f3-400d-a31a-b131c63d8582","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-644e66"}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9baf7c4-f9f3-400d-a31a-b131c63d8582","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9baf7c4-f9f3-400d-a31a-b131c63d8582","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9baf7c4-f9f3-400d-a31a-b131c63d8582","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72dcbe07-bff8-4655-bc25-c7162e07c231","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33374","PortSpecifier":{"PortValue":33374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72dcbe07-bff8-4655-bc25-c7162e07c231","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72dcbe07-bff8-4655-bc25-c7162e07c231","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33374","PortSpecifier":{"PortValue":33374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408226,"nanos":104941026},"http":{"id":"72dcbe07-bff8-4655-bc25-c7162e07c231","method":"POST","headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72dcbe07-bff8-4655-bc25-c7162e07c231","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uyFZ9BCByX9hzrl2_Pg5yWrqClyi9O74BaYuM6H2jhUz5C938LI1qJu6vk76"}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"72dcbe07-bff8-4655-bc25-c7162e07c231","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c72c9a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uyFZ9BCByX9hzrl2_Pg5yWrqClyi9O74BaYuM6H2jhUz5C938LI1qJu6vk76\"}"}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"72dcbe07-bff8-4655-bc25-c7162e07c231","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c72c9a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"512a9fab-4532-4865-a61e-2c69654c4a53","keyName":"e2e-sub-iso-840f77","subscription":"e2e-shared-sub-644e66","tenant":"e2e-shared-b-c72c9a","userId":"512a9fab-4532-4865-a61e-2c69654c4a53","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72dcbe07-bff8-4655-bc25-c7162e07c231","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72dcbe07-bff8-4655-bc25-c7162e07c231","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72dcbe07-bff8-4655-bc25-c7162e07c231","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72dcbe07-bff8-4655-bc25-c7162e07c231","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c72c9a/sub-test-model-c72c9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72dcbe07-bff8-4655-bc25-c7162e07c231","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72dcbe07-bff8-4655-bc25-c7162e07c231","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72dcbe07-bff8-4655-bc25-c7162e07c231","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-644e66"}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72dcbe07-bff8-4655-bc25-c7162e07c231","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72dcbe07-bff8-4655-bc25-c7162e07c231","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:10:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72dcbe07-bff8-4655-bc25-c7162e07c231","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1283914e527e0f7b1369db0199d8acc2ce108990fb5b43cc4e4eb747317c3213"}
{"level":"info","ts":"2026-07-07T07:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2905c860ee1d961f15c43cbba4cbec494a6dce89a726e180e267204f086ba8ff"}
{"level":"info","ts":"2026-07-07T07:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed7ac919c16e0f6aa613c0225428700c41f1234709d66088739c1d505ae81d97"}
{"level":"info","ts":"2026-07-07T07:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddc913021d148550d68f2d1df6fe0f5dc8b7886060c03e8832816c4ef53f27e1"}
{"level":"info","ts":"2026-07-07T07:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27ed53999c714fbcc40b1b267e41961d890540c83f89ce9f678c3c8ee696e1c3"}
{"level":"info","ts":"2026-07-07T07:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/299511dcdcebd9db7617576866ae9b5edabc0e43310b7a1a0bcfb3c20bbf60d4"}
{"level":"info","ts":"2026-07-07T07:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/626965db546f0a67271224787b2372efa56369e5b2a01d5aae40b50ab8b04ecd"}
{"level":"info","ts":"2026-07-07T07:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4338ee58bf8fd11f833cb2d679a213462aa6542550bbedfcec51e8f569535457"}
{"level":"info","ts":"2026-07-07T07:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92a6ee57bc054dfb9efeaccf3b18ae0490b2dbb94a9e8cc59baae9d0089dc743"}
{"level":"info","ts":"2026-07-07T07:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65a73460b6019c40ba554b25759e4eef43b4ddc5ee3e97aa14cd502c917fe0a7"}
{"level":"info","ts":"2026-07-07T07:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f06f9223ef958924a7977f7dec000271196dcbe1069624b9c97b4f302a7fd515"}
{"level":"info","ts":"2026-07-07T07:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1afb651b403755fd6aaa9f1701ec999ca477ffa746340d6b02c574fda98cf8de"}
{"level":"info","ts":"2026-07-07T07:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7db2a4c95e59077b15a4e1bb816b3efdbbdcb8c5b68fbe15b555ff36ffb9bfbb"}
{"level":"info","ts":"2026-07-07T07:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7948f9d78d13b8fa36add9aa9c72cb619c5c14612ec8501429dc5864d7a4b3a7"}
{"level":"info","ts":"2026-07-07T07:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54ccf580ff684cb8d188be51067ccf189414d9ad851e6a3deeee07a986acea92"}
{"level":"info","ts":"2026-07-07T07:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2077a6ed9ede7887bee1c869b944f7997c432b73d3aef454163aa081032277b8"}
{"level":"debug","ts":"2026-07-07T07:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4"}
{"level":"debug","ts":"2026-07-07T07:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4"}
{"level":"debug","ts":"2026-07-07T07:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4"}
{"level":"debug","ts":"2026-07-07T07:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4"}
{"level":"debug","ts":"2026-07-07T07:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4"}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668"}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668"}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"}
{"level":"error","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"}
{"level":"error","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88"}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88"}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840"}
{"level":"info","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe"}
{"level":"info","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"}
{"level":"info","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c"}
{"level":"info","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840"}
{"level":"debug","ts":"2026-07-07T07:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993"}
{"level":"debug","ts":"2026-07-07T07:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993"}
{"level":"debug","ts":"2026-07-07T07:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993"}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5"}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5"}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5"}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54"}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54"}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31"}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956"}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361"}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956"}
{"level":"debug","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956"}
{"level":"debug","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe"}
{"level":"debug","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe"}
{"level":"debug","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe"}
{"level":"debug","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31"}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668"}
{"level":"error","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88"}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e920364fc486257f262378f4142b44655305b206dcd7efd1390889507f64a6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5"}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e920364fc486257f262378f4142b44655305b206dcd7efd1390889507f64a6d"}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54"}
{"level":"info","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38008","PortSpecifier":{"PortValue":38008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38008","PortSpecifier":{"PortValue":38008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408301,"nanos":509992923},"http":{"id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43914","PortSpecifier":{"PortValue":43914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"873a7342-0326-46a3-bad4-744f9d7f852c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43914","PortSpecifier":{"PortValue":43914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408301,"nanos":551239768},"http":{"id":"873a7342-0326-46a3-bad4-744f9d7f852c","method":"POST","headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c72c9a/rate-test-model-c72c9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38024","PortSpecifier":{"PortValue":38024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","method":"POST","path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38024","PortSpecifier":{"PortValue":38024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408301,"nanos":596205946},"http":{"id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1mpeCn68ziHvLHvQ_iDlqYMMCrbsajsI2NkCphc9cfrYSlWaNn1Xyakiw9fF"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1mpeCn68ziHvLHvQ_iDlqYMMCrbsajsI2NkCphc9cfrYSlWaNn1Xyakiw9fF\"}"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ed20746-0e6b-4a36-b475-5d4d85666bf4","keyName":"e2e-rate-a-cde102","subscription":"e2e-rate-iso-a-cde102","tenant":"e2e-shared-a-94448f","userId":"9ed20746-0e6b-4a36-b475-5d4d85666bf4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\",\"requestedSubscription\":\"e2e-rate-iso-a-cde102\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cde102","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cde102"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ed20746-0e6b-4a36-b475-5d4d85666bf4","keyName":"e2e-rate-a-cde102","selected_subscription":"e2e-rate-iso-a-cde102","selected_subscription_key":"ai-tenant-e2e-shared-a-94448f/e2e-rate-iso-a-cde102@ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cde102","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38030","PortSpecifier":{"PortValue":38030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","method":"POST","path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38030","PortSpecifier":{"PortValue":38030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408302,"nanos":658636178},"http":{"id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1mpeCn68ziHvLHvQ_iDlqYMMCrbsajsI2NkCphc9cfrYSlWaNn1Xyakiw9fF"}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1mpeCn68ziHvLHvQ_iDlqYMMCrbsajsI2NkCphc9cfrYSlWaNn1Xyakiw9fF\"}"}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ed20746-0e6b-4a36-b475-5d4d85666bf4","keyName":"e2e-rate-a-cde102","subscription":"e2e-rate-iso-a-cde102","tenant":"e2e-shared-a-94448f","userId":"9ed20746-0e6b-4a36-b475-5d4d85666bf4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\",\"requestedSubscription\":\"e2e-rate-iso-a-cde102\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cde102","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cde102"}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ed20746-0e6b-4a36-b475-5d4d85666bf4","keyName":"e2e-rate-a-cde102","selected_subscription":"e2e-rate-iso-a-cde102","selected_subscription_key":"ai-tenant-e2e-shared-a-94448f/e2e-rate-iso-a-cde102@ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cde102","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38038","PortSpecifier":{"PortValue":38038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","method":"POST","path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38038","PortSpecifier":{"PortValue":38038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408303,"nanos":694785293},"http":{"id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1mpeCn68ziHvLHvQ_iDlqYMMCrbsajsI2NkCphc9cfrYSlWaNn1Xyakiw9fF"}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1mpeCn68ziHvLHvQ_iDlqYMMCrbsajsI2NkCphc9cfrYSlWaNn1Xyakiw9fF\"}"}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ed20746-0e6b-4a36-b475-5d4d85666bf4","keyName":"e2e-rate-a-cde102","subscription":"e2e-rate-iso-a-cde102","tenant":"e2e-shared-a-94448f","userId":"9ed20746-0e6b-4a36-b475-5d4d85666bf4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\",\"requestedSubscription\":\"e2e-rate-iso-a-cde102\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cde102","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cde102"}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ed20746-0e6b-4a36-b475-5d4d85666bf4","keyName":"e2e-rate-a-cde102","selected_subscription":"e2e-rate-iso-a-cde102","selected_subscription_key":"ai-tenant-e2e-shared-a-94448f/e2e-rate-iso-a-cde102@ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cde102","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54686","PortSpecifier":{"PortValue":54686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54686","PortSpecifier":{"PortValue":54686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408314,"nanos":460605074},"http":{"id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58296","PortSpecifier":{"PortValue":58296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd5694f9-622e-49fd-b31f-48085a0e2470","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58296","PortSpecifier":{"PortValue":58296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408314,"nanos":500783737},"http":{"id":"bd5694f9-622e-49fd-b31f-48085a0e2470","method":"POST","headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c72c9a/rate-test-model-c72c9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54698","PortSpecifier":{"PortValue":54698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","method":"POST","path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54698","PortSpecifier":{"PortValue":54698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408314,"nanos":539265573},"http":{"id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TiGik3TGBAzLeuYv_YnbpdxG0elro3jZyjT9nSVcLZWkZGenfmL9Rjuic6M8"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TiGik3TGBAzLeuYv_YnbpdxG0elro3jZyjT9nSVcLZWkZGenfmL9Rjuic6M8\"}"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"43c30739-aeeb-4890-94bd-c93084047e5a","keyName":"e2e-rate-a-311c1a","subscription":"e2e-rate-iso-a-311c1a","tenant":"e2e-shared-a-94448f","userId":"43c30739-aeeb-4890-94bd-c93084047e5a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\",\"requestedSubscription\":\"e2e-rate-iso-a-311c1a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-311c1a","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-311c1a"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"43c30739-aeeb-4890-94bd-c93084047e5a","keyName":"e2e-rate-a-311c1a","selected_subscription":"e2e-rate-iso-a-311c1a","selected_subscription_key":"ai-tenant-e2e-shared-a-94448f/e2e-rate-iso-a-311c1a@ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-311c1a","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60336","PortSpecifier":{"PortValue":60336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","method":"POST","path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60336","PortSpecifier":{"PortValue":60336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408315,"nanos":575689636},"http":{"id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TiGik3TGBAzLeuYv_YnbpdxG0elro3jZyjT9nSVcLZWkZGenfmL9Rjuic6M8"}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TiGik3TGBAzLeuYv_YnbpdxG0elro3jZyjT9nSVcLZWkZGenfmL9Rjuic6M8\"}"}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"43c30739-aeeb-4890-94bd-c93084047e5a","keyName":"e2e-rate-a-311c1a","subscription":"e2e-rate-iso-a-311c1a","tenant":"e2e-shared-a-94448f","userId":"43c30739-aeeb-4890-94bd-c93084047e5a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\",\"requestedSubscription\":\"e2e-rate-iso-a-311c1a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-311c1a","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-311c1a"}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"43c30739-aeeb-4890-94bd-c93084047e5a","keyName":"e2e-rate-a-311c1a","selected_subscription":"e2e-rate-iso-a-311c1a","selected_subscription_key":"ai-tenant-e2e-shared-a-94448f/e2e-rate-iso-a-311c1a@ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-311c1a","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5744141-ea33-4df1-9398-d38b72602903","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60350","PortSpecifier":{"PortValue":60350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5744141-ea33-4df1-9398-d38b72602903","method":"POST","path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5744141-ea33-4df1-9398-d38b72602903","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60350","PortSpecifier":{"PortValue":60350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408316,"nanos":615217048},"http":{"id":"e5744141-ea33-4df1-9398-d38b72602903","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TiGik3TGBAzLeuYv_YnbpdxG0elro3jZyjT9nSVcLZWkZGenfmL9Rjuic6M8"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TiGik3TGBAzLeuYv_YnbpdxG0elro3jZyjT9nSVcLZWkZGenfmL9Rjuic6M8\"}"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"43c30739-aeeb-4890-94bd-c93084047e5a","keyName":"e2e-rate-a-311c1a","subscription":"e2e-rate-iso-a-311c1a","tenant":"e2e-shared-a-94448f","userId":"43c30739-aeeb-4890-94bd-c93084047e5a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\",\"requestedSubscription\":\"e2e-rate-iso-a-311c1a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-311c1a","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5744141-ea33-4df1-9398-d38b72602903","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-311c1a"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"43c30739-aeeb-4890-94bd-c93084047e5a","keyName":"e2e-rate-a-311c1a","selected_subscription":"e2e-rate-iso-a-311c1a","selected_subscription_key":"ai-tenant-e2e-shared-a-94448f/e2e-rate-iso-a-311c1a@ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-311c1a","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5744141-ea33-4df1-9398-d38b72602903","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5744141-ea33-4df1-9398-d38b72602903","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40464","PortSpecifier":{"PortValue":40464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","method":"POST","path":"/ai-tenant-e2e-shared-b-c72c9a/rate-test-model-c72c9a/v1/completions","host":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40464","PortSpecifier":{"PortValue":40464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408316,"nanos":652229812},"http":{"id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","method":"POST","headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-c72c9a/rate-test-model-c72c9a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PmwD7ryd7uNh79Vw_1rxd1pGblxyUMblHSxCuIZ6cqofxUWyphYnjkrLHJ2T"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c72c9a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PmwD7ryd7uNh79Vw_1rxd1pGblxyUMblHSxCuIZ6cqofxUWyphYnjkrLHJ2T\"}"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c72c9a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"11de6ec4-e1cd-40c0-8974-60ad559881c2","keyName":"e2e-rate-b-311c1a","subscription":"e2e-rate-iso-b-311c1a","tenant":"e2e-shared-b-c72c9a","userId":"11de6ec4-e1cd-40c0-8974-60ad559881c2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-c72c9a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-c72c9a/rate-test-model-c72c9a\",\"requestedSubscription\":\"e2e-rate-iso-b-311c1a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c72c9a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c72c9a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-311c1a","namespace":"ai-tenant-e2e-shared-b-c72c9a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c72c9a/rate-test-model-c72c9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-311c1a"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"11de6ec4-e1cd-40c0-8974-60ad559881c2","keyName":"e2e-rate-b-311c1a","selected_subscription":"e2e-rate-iso-b-311c1a","selected_subscription_key":"ai-tenant-e2e-shared-b-c72c9a/e2e-rate-iso-b-311c1a@ai-tenant-e2e-shared-b-c72c9a/rate-test-model-c72c9a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c72c9a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-311c1a","namespace":"ai-tenant-e2e-shared-b-c72c9a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88"}
{"level":"info","ts":"2026-07-07T07:12:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e920364fc486257f262378f4142b44655305b206dcd7efd1390889507f64a6d"}
{"level":"info","ts":"2026-07-07T07:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"}