--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"346a0f80-0e4a-466e-b0a9-27746e0c37a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"346a0f80-0e4a-466e-b0a9-27746e0c37a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"346a0f80-0e4a-466e-b0a9-27746e0c37a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-a920e4-sub"}
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"346a0f80-0e4a-466e-b0a9-27746e0c37a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dfbf1034-623d-4ea4-a3d6-2303d969c7f9","keyName":"e2e-tenant-inference-a920e4","selected_subscription":"test-model-a920e4-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-a920e4/test-model-a920e4-sub@ai-tenant-e2e-inf-a-a920e4/test-model-a920e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-a920e4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-a920e4-sub","namespace":"ai-tenant-e2e-inf-a-a920e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"346a0f80-0e4a-466e-b0a9-27746e0c37a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"346a0f80-0e4a-466e-b0a9-27746e0c37a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcc11ff5-f82f-4c6a-8f3a-b1f78739cfdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33986","PortSpecifier":{"PortValue":33986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dcc11ff5-f82f-4c6a-8f3a-b1f78739cfdc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-a920e4.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcc11ff5-f82f-4c6a-8f3a-b1f78739cfdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33986","PortSpecifier":{"PortValue":33986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131348,"nanos":908171262},"http":{"id":"dcc11ff5-f82f-4c6a-8f3a-b1f78739cfdc","method":"POST","headers":{":authority":"e2e-inf-a-a920e4.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dcc11ff5-f82f-4c6a-8f3a-b1f78739cfdc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dcc11ff5-f82f-4c6a-8f3a-b1f78739cfdc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dcc11ff5-f82f-4c6a-8f3a-b1f78739cfdc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ec8bbe6b3a4a7d06650dc77f33d6d5cb43b79518e56597b0ba2f984f339e16ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-a920e4.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcc11ff5-f82f-4c6a-8f3a-b1f78739cfdc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcc11ff5-f82f-4c6a-8f3a-b1f78739cfdc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcc11ff5-f82f-4c6a-8f3a-b1f78739cfdc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-a920e4/test-model-a920e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-inf-a-a920e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dcc11ff5-f82f-4c6a-8f3a-b1f78739cfdc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcc11ff5-f82f-4c6a-8f3a-b1f78739cfdc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcc11ff5-f82f-4c6a-8f3a-b1f78739cfdc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcc11ff5-f82f-4c6a-8f3a-b1f78739cfdc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcc11ff5-f82f-4c6a-8f3a-b1f78739cfdc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c296f1dc-2723-4b12-9e93-fc1c59d928f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55906","PortSpecifier":{"PortValue":55906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c296f1dc-2723-4b12-9e93-fc1c59d928f3","method":"POST","path":"/ai-tenant-e2e-inf-b-89ce7e/test-model-89ce7e/v1/chat/completions","host":"e2e-inf-b-89ce7e.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c296f1dc-2723-4b12-9e93-fc1c59d928f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55906","PortSpecifier":{"PortValue":55906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131348,"nanos":949362398},"http":{"id":"c296f1dc-2723-4b12-9e93-fc1c59d928f3","method":"POST","headers":{":authority":"e2e-inf-b-89ce7e.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-89ce7e/test-model-89ce7e/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c296f1dc-2723-4b12-9e93-fc1c59d928f3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7MoeYT19T4lvXi7h_9znXo6zAT97j50zgtj8QoMstRECj2eQHP6sc65c7JPm"}
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c296f1dc-2723-4b12-9e93-fc1c59d928f3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-89ce7e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7MoeYT19T4lvXi7h_9znXo6zAT97j50zgtj8QoMstRECj2eQHP6sc65c7JPm\"}"}
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c296f1dc-2723-4b12-9e93-fc1c59d928f3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-89ce7e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"c296f1dc-2723-4b12-9e93-fc1c59d928f3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-89ce7e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c296f1dc-2723-4b12-9e93-fc1c59d928f3","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"ba83c47882c619bc667d1c95e1d0e6fb290dff8da9f304a4ff286672c0510983"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-89ce7e.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-89ce7e/test-model-89ce7e/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c296f1dc-2723-4b12-9e93-fc1c59d928f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"c296f1dc-2723-4b12-9e93-fc1c59d928f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c296f1dc-2723-4b12-9e93-fc1c59d928f3","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-15T16:02:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c296f1dc-2723-4b12-9e93-fc1c59d928f3","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-15T16:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97e16d853ebab18abe479acf85cfab074c3254e2d893461efd6c72958db18478"}
{"level":"info","ts":"2026-07-15T16:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4862eef77987069cb883cfafb6dce3d46efa8f0df6782728d26d31ee39ed42cc"}
{"level":"info","ts":"2026-07-15T16:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8775433e2d151af27bc4ef2b4c99134e8d6d30622d087e4fd7609ae72907278d"}
{"level":"info","ts":"2026-07-15T16:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35233635a58df4ff4d7c86cd1278ff4adef1c82a8a0b3cfcf2f9d5e82d9172d2"}
{"level":"info","ts":"2026-07-15T16:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69ae6bd9426ec9697102c4f3c6a6e83596be61a363bb298a4f4a1d715bf5d2a9"}
{"level":"info","ts":"2026-07-15T16:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0418e55129102792eb2b9e07c2664f3ccc179cca290e043d29b9e4ab2fa11c0"}
{"level":"info","ts":"2026-07-15T16:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c888ae474e167b1f8d3eafe19154e8f4b0a4ef87b9c1f7f245b79e2aa64b1efe"}
{"level":"info","ts":"2026-07-15T16:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d038a2e503ed2447ab1d2e02a9be33d2e84b726486d5183dd5670be619cafeb"}
{"level":"info","ts":"2026-07-15T16:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b099d182a61d305471522a656bcc5c8f150cb9b165763e0efcf5799ae3d6293e"}
{"level":"info","ts":"2026-07-15T16:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c43daa4754f9cb0ef77f031d5a9e1db4ac043322e90cdc23299f4455210c6fd2"}
{"level":"info","ts":"2026-07-15T16:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5639a6292a69b0d18149fa7b7b23a6487ffdd9a6eef305aa49537208df9c686e"}
{"level":"info","ts":"2026-07-15T16:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba83c47882c619bc667d1c95e1d0e6fb290dff8da9f304a4ff286672c0510983"}
{"level":"info","ts":"2026-07-15T16:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a23cd368a43f0ecd32a4738036fcfe6067f73f580382a42bfe3bcb8dd51b8bb6"}
{"level":"info","ts":"2026-07-15T16:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7b43d8eb25c69f4b09d56e9f8186fc47bb9fda271bcf79e0be530ed747b6f62"}
{"level":"info","ts":"2026-07-15T16:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32fd52d6f9412c9480f53695647ae524886b5b94be7065e01c6e3eaa64590bc9"}
{"level":"info","ts":"2026-07-15T16:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/950166ccfd17607e10f9c7152acd6fe43e8a74f46ee7e7033a69932c75dfc03f"}
{"level":"info","ts":"2026-07-15T16:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec8bbe6b3a4a7d06650dc77f33d6d5cb43b79518e56597b0ba2f984f339e16ab"}
{"level":"info","ts":"2026-07-15T16:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6d5b088b2f26a59315d0f4253602fd9df2727b5a1c207d2b9857d40b8828ebf"}
{"level":"info","ts":"2026-07-15T16:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f91874e217b6a33713ea9a382e814d8bbc4bd0267ec79f02fbbed3cd578c67d0"}
{"level":"info","ts":"2026-07-15T16:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d0fcfc800e5cf8cf77dc78435f510e62bd49bd57a281bc4245483c76530a24b"}
{"level":"info","ts":"2026-07-15T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f2d1a5d0d076d55b131b75058dc3b4060f6005468fc8ed9f19ab1b5f9f82c65"}
{"level":"info","ts":"2026-07-15T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/802e127ae3f60407a4766e2ee1114a22267a7fbd10c325a8b1039dbcf57a9b46"}
{"level":"info","ts":"2026-07-15T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47a506d88c77b753b7fd04e54112c677b4c12f098f479fdef0f9210e2ed6b0f3"}
{"level":"info","ts":"2026-07-15T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3ea2935c86ad9f0a1a1ddf6ae9bcda18d35885e4190ec709dc9a72dc6e1eb36"}
{"level":"debug","ts":"2026-07-15T16:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:03:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:03:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa"}
{"level":"info","ts":"2026-07-15T16:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa"}
{"level":"debug","ts":"2026-07-15T16:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:03:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:03:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:03:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:03:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa"}
{"level":"info","ts":"2026-07-15T16:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:03:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:03:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa"}
{"level":"info","ts":"2026-07-15T16:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:03:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:03:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa"}
{"level":"info","ts":"2026-07-15T16:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50321450f840fb1c42b740a43afd08f82a414ba584419b70431ee6f663815617","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:03:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:03:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50321450f840fb1c42b740a43afd08f82a414ba584419b70431ee6f663815617"}
{"level":"info","ts":"2026-07-15T16:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50321450f840fb1c42b740a43afd08f82a414ba584419b70431ee6f663815617","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50321450f840fb1c42b740a43afd08f82a414ba584419b70431ee6f663815617","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50321450f840fb1c42b740a43afd08f82a414ba584419b70431ee6f663815617"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa"}
{"level":"error","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"50321450f840fb1c42b740a43afd08f82a414ba584419b70431ee6f663815617","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"50321450f840fb1c42b740a43afd08f82a414ba584419b70431ee6f663815617\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50321450f840fb1c42b740a43afd08f82a414ba584419b70431ee6f663815617"}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50321450f840fb1c42b740a43afd08f82a414ba584419b70431ee6f663815617","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50321450f840fb1c42b740a43afd08f82a414ba584419b70431ee6f663815617"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa"}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50321450f840fb1c42b740a43afd08f82a414ba584419b70431ee6f663815617","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88e85d18de3c55b0b3fe122d5078ac69667245555faad49d2fb7e6eab4ef07a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88e85d18de3c55b0b3fe122d5078ac69667245555faad49d2fb7e6eab4ef07a8"}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88e85d18de3c55b0b3fe122d5078ac69667245555faad49d2fb7e6eab4ef07a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50321450f840fb1c42b740a43afd08f82a414ba584419b70431ee6f663815617","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88e85d18de3c55b0b3fe122d5078ac69667245555faad49d2fb7e6eab4ef07a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88e85d18de3c55b0b3fe122d5078ac69667245555faad49d2fb7e6eab4ef07a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7"}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88e85d18de3c55b0b3fe122d5078ac69667245555faad49d2fb7e6eab4ef07a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50321450f840fb1c42b740a43afd08f82a414ba584419b70431ee6f663815617"}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88e85d18de3c55b0b3fe122d5078ac69667245555faad49d2fb7e6eab4ef07a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88e85d18de3c55b0b3fe122d5078ac69667245555faad49d2fb7e6eab4ef07a8"}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88e85d18de3c55b0b3fe122d5078ac69667245555faad49d2fb7e6eab4ef07a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7"}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88e85d18de3c55b0b3fe122d5078ac69667245555faad49d2fb7e6eab4ef07a8"}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88e85d18de3c55b0b3fe122d5078ac69667245555faad49d2fb7e6eab4ef07a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88e85d18de3c55b0b3fe122d5078ac69667245555faad49d2fb7e6eab4ef07a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88e85d18de3c55b0b3fe122d5078ac69667245555faad49d2fb7e6eab4ef07a8"}
{"level":"error","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7"}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88e85d18de3c55b0b3fe122d5078ac69667245555faad49d2fb7e6eab4ef07a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88e85d18de3c55b0b3fe122d5078ac69667245555faad49d2fb7e6eab4ef07a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88e85d18de3c55b0b3fe122d5078ac69667245555faad49d2fb7e6eab4ef07a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88e85d18de3c55b0b3fe122d5078ac69667245555faad49d2fb7e6eab4ef07a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7"}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:03:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88e85d18de3c55b0b3fe122d5078ac69667245555faad49d2fb7e6eab4ef07a8"}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7"}
{"level":"debug","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e184bf2da8258e8f925c23643bb80c04cc51dad9f152b5161389ea47267c1dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:03:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:03:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e184bf2da8258e8f925c23643bb80c04cc51dad9f152b5161389ea47267c1dff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e184bf2da8258e8f925c23643bb80c04cc51dad9f152b5161389ea47267c1dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:03:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:03:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e184bf2da8258e8f925c23643bb80c04cc51dad9f152b5161389ea47267c1dff"}
{"level":"info","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e184bf2da8258e8f925c23643bb80c04cc51dad9f152b5161389ea47267c1dff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e184bf2da8258e8f925c23643bb80c04cc51dad9f152b5161389ea47267c1dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:03:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:03:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e184bf2da8258e8f925c23643bb80c04cc51dad9f152b5161389ea47267c1dff"}
{"level":"error","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e184bf2da8258e8f925c23643bb80c04cc51dad9f152b5161389ea47267c1dff","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e184bf2da8258e8f925c23643bb80c04cc51dad9f152b5161389ea47267c1dff\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e184bf2da8258e8f925c23643bb80c04cc51dad9f152b5161389ea47267c1dff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e184bf2da8258e8f925c23643bb80c04cc51dad9f152b5161389ea47267c1dff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e184bf2da8258e8f925c23643bb80c04cc51dad9f152b5161389ea47267c1dff"}
{"level":"debug","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e184bf2da8258e8f925c23643bb80c04cc51dad9f152b5161389ea47267c1dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:03:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:03:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e184bf2da8258e8f925c23643bb80c04cc51dad9f152b5161389ea47267c1dff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e184bf2da8258e8f925c23643bb80c04cc51dad9f152b5161389ea47267c1dff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e184bf2da8258e8f925c23643bb80c04cc51dad9f152b5161389ea47267c1dff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e184bf2da8258e8f925c23643bb80c04cc51dad9f152b5161389ea47267c1dff"}
{"level":"debug","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd835eecfc6fa8ff6beb8dd5f28b6d4c3f458ef7001e11508d2a8888f375d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:03:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:03:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd835eecfc6fa8ff6beb8dd5f28b6d4c3f458ef7001e11508d2a8888f375d8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd835eecfc6fa8ff6beb8dd5f28b6d4c3f458ef7001e11508d2a8888f375d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:03:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:03:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd835eecfc6fa8ff6beb8dd5f28b6d4c3f458ef7001e11508d2a8888f375d8d"}
{"level":"info","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd835eecfc6fa8ff6beb8dd5f28b6d4c3f458ef7001e11508d2a8888f375d8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd835eecfc6fa8ff6beb8dd5f28b6d4c3f458ef7001e11508d2a8888f375d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:03:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:03:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd835eecfc6fa8ff6beb8dd5f28b6d4c3f458ef7001e11508d2a8888f375d8d"}
{"level":"error","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4cd835eecfc6fa8ff6beb8dd5f28b6d4c3f458ef7001e11508d2a8888f375d8d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4cd835eecfc6fa8ff6beb8dd5f28b6d4c3f458ef7001e11508d2a8888f375d8d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd835eecfc6fa8ff6beb8dd5f28b6d4c3f458ef7001e11508d2a8888f375d8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd835eecfc6fa8ff6beb8dd5f28b6d4c3f458ef7001e11508d2a8888f375d8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:03:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd835eecfc6fa8ff6beb8dd5f28b6d4c3f458ef7001e11508d2a8888f375d8d"}
{"level":"debug","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0e26f1dbf8113a6e6c20507376fc4d0bd58a9ec02c6f0103d6981bcdcc36da3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:03:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0e26f1dbf8113a6e6c20507376fc4d0bd58a9ec02c6f0103d6981bcdcc36da3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0e26f1dbf8113a6e6c20507376fc4d0bd58a9ec02c6f0103d6981bcdcc36da3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0e26f1dbf8113a6e6c20507376fc4d0bd58a9ec02c6f0103d6981bcdcc36da3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0e26f1dbf8113a6e6c20507376fc4d0bd58a9ec02c6f0103d6981bcdcc36da3"}
{"level":"debug","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd835eecfc6fa8ff6beb8dd5f28b6d4c3f458ef7001e11508d2a8888f375d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:03:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:03:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cd835eecfc6fa8ff6beb8dd5f28b6d4c3f458ef7001e11508d2a8888f375d8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd835eecfc6fa8ff6beb8dd5f28b6d4c3f458ef7001e11508d2a8888f375d8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0e26f1dbf8113a6e6c20507376fc4d0bd58a9ec02c6f0103d6981bcdcc36da3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd835eecfc6fa8ff6beb8dd5f28b6d4c3f458ef7001e11508d2a8888f375d8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0e26f1dbf8113a6e6c20507376fc4d0bd58a9ec02c6f0103d6981bcdcc36da3"}
{"level":"info","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd835eecfc6fa8ff6beb8dd5f28b6d4c3f458ef7001e11508d2a8888f375d8d"}
{"level":"debug","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0e26f1dbf8113a6e6c20507376fc4d0bd58a9ec02c6f0103d6981bcdcc36da3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:03:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:03:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0e26f1dbf8113a6e6c20507376fc4d0bd58a9ec02c6f0103d6981bcdcc36da3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0e26f1dbf8113a6e6c20507376fc4d0bd58a9ec02c6f0103d6981bcdcc36da3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0e26f1dbf8113a6e6c20507376fc4d0bd58a9ec02c6f0103d6981bcdcc36da3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e43179fbc1ee8fc54f7fd71aa7b35bc45417b5f51057878ff0dd332f4e5f66f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:03:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e43179fbc1ee8fc54f7fd71aa7b35bc45417b5f51057878ff0dd332f4e5f66f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e43179fbc1ee8fc54f7fd71aa7b35bc45417b5f51057878ff0dd332f4e5f66f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0e26f1dbf8113a6e6c20507376fc4d0bd58a9ec02c6f0103d6981bcdcc36da3"}
{"level":"debug","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e43179fbc1ee8fc54f7fd71aa7b35bc45417b5f51057878ff0dd332f4e5f66f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:03:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e43179fbc1ee8fc54f7fd71aa7b35bc45417b5f51057878ff0dd332f4e5f66f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e43179fbc1ee8fc54f7fd71aa7b35bc45417b5f51057878ff0dd332f4e5f66f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e43179fbc1ee8fc54f7fd71aa7b35bc45417b5f51057878ff0dd332f4e5f66f"}
{"level":"debug","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e43179fbc1ee8fc54f7fd71aa7b35bc45417b5f51057878ff0dd332f4e5f66f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e43179fbc1ee8fc54f7fd71aa7b35bc45417b5f51057878ff0dd332f4e5f66f"}
{"level":"debug","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e43179fbc1ee8fc54f7fd71aa7b35bc45417b5f51057878ff0dd332f4e5f66f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:03:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:03:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e43179fbc1ee8fc54f7fd71aa7b35bc45417b5f51057878ff0dd332f4e5f66f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e43179fbc1ee8fc54f7fd71aa7b35bc45417b5f51057878ff0dd332f4e5f66f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e43179fbc1ee8fc54f7fd71aa7b35bc45417b5f51057878ff0dd332f4e5f66f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e43179fbc1ee8fc54f7fd71aa7b35bc45417b5f51057878ff0dd332f4e5f66f"}
{"level":"info","ts":"2026-07-15T16:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bdb18980359e45271b976a150a6243ef7c0f37969c1d2abc6e37cdab5dd80f7"}
{"level":"info","ts":"2026-07-15T16:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e1084c650c33b9d208260469b2d2b795f29d98cc839a807e499de2d213a02aa"}
{"level":"info","ts":"2026-07-15T16:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88e85d18de3c55b0b3fe122d5078ac69667245555faad49d2fb7e6eab4ef07a8"}
{"level":"info","ts":"2026-07-15T16:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50321450f840fb1c42b740a43afd08f82a414ba584419b70431ee6f663815617"}
{"level":"info","ts":"2026-07-15T16:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cd835eecfc6fa8ff6beb8dd5f28b6d4c3f458ef7001e11508d2a8888f375d8d"}
{"level":"info","ts":"2026-07-15T16:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e43179fbc1ee8fc54f7fd71aa7b35bc45417b5f51057878ff0dd332f4e5f66f"}
{"level":"info","ts":"2026-07-15T16:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0e26f1dbf8113a6e6c20507376fc4d0bd58a9ec02c6f0103d6981bcdcc36da3"}
{"level":"info","ts":"2026-07-15T16:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e184bf2da8258e8f925c23643bb80c04cc51dad9f152b5161389ea47267c1dff"}
{"level":"debug","ts":"2026-07-15T16:06:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"}
{"level":"debug","ts":"2026-07-15T16:06:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"}
{"level":"debug","ts":"2026-07-15T16:06:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af"}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af"}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af"}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af"}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af"}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df2e6ab9ede4c88163b44decda649da21f03f9b3c02619b6e0be7b219da10089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df2e6ab9ede4c88163b44decda649da21f03f9b3c02619b6e0be7b219da10089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df2e6ab9ede4c88163b44decda649da21f03f9b3c02619b6e0be7b219da10089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df2e6ab9ede4c88163b44decda649da21f03f9b3c02619b6e0be7b219da10089"}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df2e6ab9ede4c88163b44decda649da21f03f9b3c02619b6e0be7b219da10089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df2e6ab9ede4c88163b44decda649da21f03f9b3c02619b6e0be7b219da10089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"df2e6ab9ede4c88163b44decda649da21f03f9b3c02619b6e0be7b219da10089","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"df2e6ab9ede4c88163b44decda649da21f03f9b3c02619b6e0be7b219da10089\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df2e6ab9ede4c88163b44decda649da21f03f9b3c02619b6e0be7b219da10089","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df2e6ab9ede4c88163b44decda649da21f03f9b3c02619b6e0be7b219da10089"}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df2e6ab9ede4c88163b44decda649da21f03f9b3c02619b6e0be7b219da10089","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df2e6ab9ede4c88163b44decda649da21f03f9b3c02619b6e0be7b219da10089"}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4342d000388347f42cbc6f8a9b411c310420d4a68b3b61b4e57d5165b3a41929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4342d000388347f42cbc6f8a9b411c310420d4a68b3b61b4e57d5165b3a41929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4342d000388347f42cbc6f8a9b411c310420d4a68b3b61b4e57d5165b3a41929"}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4342d000388347f42cbc6f8a9b411c310420d4a68b3b61b4e57d5165b3a41929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4342d000388347f42cbc6f8a9b411c310420d4a68b3b61b4e57d5165b3a41929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4342d000388347f42cbc6f8a9b411c310420d4a68b3b61b4e57d5165b3a41929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df2e6ab9ede4c88163b44decda649da21f03f9b3c02619b6e0be7b219da10089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df2e6ab9ede4c88163b44decda649da21f03f9b3c02619b6e0be7b219da10089"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf"}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df2e6ab9ede4c88163b44decda649da21f03f9b3c02619b6e0be7b219da10089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4342d000388347f42cbc6f8a9b411c310420d4a68b3b61b4e57d5165b3a41929"}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4342d000388347f42cbc6f8a9b411c310420d4a68b3b61b4e57d5165b3a41929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df2e6ab9ede4c88163b44decda649da21f03f9b3c02619b6e0be7b219da10089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf"}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df2e6ab9ede4c88163b44decda649da21f03f9b3c02619b6e0be7b219da10089"}
{"level":"error","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41de5eddad745b25ee08f27f413e517c349b8a942d114369f82b1f4278a6e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4342d000388347f42cbc6f8a9b411c310420d4a68b3b61b4e57d5165b3a41929"}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41de5eddad745b25ee08f27f413e517c349b8a942d114369f82b1f4278a6e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41de5eddad745b25ee08f27f413e517c349b8a942d114369f82b1f4278a6e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41de5eddad745b25ee08f27f413e517c349b8a942d114369f82b1f4278a6e60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf"}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41de5eddad745b25ee08f27f413e517c349b8a942d114369f82b1f4278a6e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11"}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41de5eddad745b25ee08f27f413e517c349b8a942d114369f82b1f4278a6e60"}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11"}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41de5eddad745b25ee08f27f413e517c349b8a942d114369f82b1f4278a6e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b41de5eddad745b25ee08f27f413e517c349b8a942d114369f82b1f4278a6e60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41de5eddad745b25ee08f27f413e517c349b8a942d114369f82b1f4278a6e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2f9b76e76dfc5218d698fb34890eb26697ded066323a0327d27f082c562e1c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11"}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2f9b76e76dfc5218d698fb34890eb26697ded066323a0327d27f082c562e1c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2f9b76e76dfc5218d698fb34890eb26697ded066323a0327d27f082c562e1c1"}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41de5eddad745b25ee08f27f413e517c349b8a942d114369f82b1f4278a6e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41de5eddad745b25ee08f27f413e517c349b8a942d114369f82b1f4278a6e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2f9b76e76dfc5218d698fb34890eb26697ded066323a0327d27f082c562e1c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2f9b76e76dfc5218d698fb34890eb26697ded066323a0327d27f082c562e1c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41de5eddad745b25ee08f27f413e517c349b8a942d114369f82b1f4278a6e60"}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2f9b76e76dfc5218d698fb34890eb26697ded066323a0327d27f082c562e1c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11"}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41de5eddad745b25ee08f27f413e517c349b8a942d114369f82b1f4278a6e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b41de5eddad745b25ee08f27f413e517c349b8a942d114369f82b1f4278a6e60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2f9b76e76dfc5218d698fb34890eb26697ded066323a0327d27f082c562e1c1"}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41de5eddad745b25ee08f27f413e517c349b8a942d114369f82b1f4278a6e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2f9b76e76dfc5218d698fb34890eb26697ded066323a0327d27f082c562e1c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ab135e72257e2f028d43236dd400eb6de3bed349a9d986bda9a2b3746fded79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41de5eddad745b25ee08f27f413e517c349b8a942d114369f82b1f4278a6e60"}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ab135e72257e2f028d43236dd400eb6de3bed349a9d986bda9a2b3746fded79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41de5eddad745b25ee08f27f413e517c349b8a942d114369f82b1f4278a6e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ab135e72257e2f028d43236dd400eb6de3bed349a9d986bda9a2b3746fded79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11"}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ab135e72257e2f028d43236dd400eb6de3bed349a9d986bda9a2b3746fded79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ab135e72257e2f028d43236dd400eb6de3bed349a9d986bda9a2b3746fded79"}
{"level":"info","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ab135e72257e2f028d43236dd400eb6de3bed349a9d986bda9a2b3746fded79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ab135e72257e2f028d43236dd400eb6de3bed349a9d986bda9a2b3746fded79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ab135e72257e2f028d43236dd400eb6de3bed349a9d986bda9a2b3746fded79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ab135e72257e2f028d43236dd400eb6de3bed349a9d986bda9a2b3746fded79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ab135e72257e2f028d43236dd400eb6de3bed349a9d986bda9a2b3746fded79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41de5eddad745b25ee08f27f413e517c349b8a942d114369f82b1f4278a6e60"}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ab135e72257e2f028d43236dd400eb6de3bed349a9d986bda9a2b3746fded79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2f8516558d95848e12715578af79564f67e71c04615fe0d029ad9153ebc4eb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2f8516558d95848e12715578af79564f67e71c04615fe0d029ad9153ebc4eb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa78adf3c97ddf813d148ea80345e06f8bc0152db1c1e945ca2730254c8e4008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa78adf3c97ddf813d148ea80345e06f8bc0152db1c1e945ca2730254c8e4008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2f8516558d95848e12715578af79564f67e71c04615fe0d029ad9153ebc4eb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11"}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa78adf3c97ddf813d148ea80345e06f8bc0152db1c1e945ca2730254c8e4008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2f8516558d95848e12715578af79564f67e71c04615fe0d029ad9153ebc4eb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa78adf3c97ddf813d148ea80345e06f8bc0152db1c1e945ca2730254c8e4008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2f8516558d95848e12715578af79564f67e71c04615fe0d029ad9153ebc4eb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa78adf3c97ddf813d148ea80345e06f8bc0152db1c1e945ca2730254c8e4008","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ab135e72257e2f028d43236dd400eb6de3bed349a9d986bda9a2b3746fded79"}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2f8516558d95848e12715578af79564f67e71c04615fe0d029ad9153ebc4eb5"}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2f8516558d95848e12715578af79564f67e71c04615fe0d029ad9153ebc4eb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2f8516558d95848e12715578af79564f67e71c04615fe0d029ad9153ebc4eb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2f8516558d95848e12715578af79564f67e71c04615fe0d029ad9153ebc4eb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa78adf3c97ddf813d148ea80345e06f8bc0152db1c1e945ca2730254c8e4008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa78adf3c97ddf813d148ea80345e06f8bc0152db1c1e945ca2730254c8e4008"}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa78adf3c97ddf813d148ea80345e06f8bc0152db1c1e945ca2730254c8e4008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2f8516558d95848e12715578af79564f67e71c04615fe0d029ad9153ebc4eb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa78adf3c97ddf813d148ea80345e06f8bc0152db1c1e945ca2730254c8e4008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa78adf3c97ddf813d148ea80345e06f8bc0152db1c1e945ca2730254c8e4008"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274"}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa78adf3c97ddf813d148ea80345e06f8bc0152db1c1e945ca2730254c8e4008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa78adf3c97ddf813d148ea80345e06f8bc0152db1c1e945ca2730254c8e4008","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2f8516558d95848e12715578af79564f67e71c04615fe0d029ad9153ebc4eb5"}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa78adf3c97ddf813d148ea80345e06f8bc0152db1c1e945ca2730254c8e4008"}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa78adf3c97ddf813d148ea80345e06f8bc0152db1c1e945ca2730254c8e4008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274"}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274"}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274"}
{"level":"debug","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f"}
{"level":"info","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f"}
{"level":"debug","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f"}
{"level":"debug","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f"}
{"level":"debug","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f"}
{"level":"debug","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f"}
{"level":"debug","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f"}
{"level":"debug","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f"}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11"}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11"}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11"}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11"}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11"}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11"}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11"}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11"}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11"}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11"}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11"}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11"}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef"}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef"}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11"}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef"}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37e3660cb6e03adb062d901bc9072c21dc5bbcc14029425d3e1b5bf98c24db4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef"}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37e3660cb6e03adb062d901bc9072c21dc5bbcc14029425d3e1b5bf98c24db4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e3660cb6e03adb062d901bc9072c21dc5bbcc14029425d3e1b5bf98c24db4e"}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37e3660cb6e03adb062d901bc9072c21dc5bbcc14029425d3e1b5bf98c24db4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37e3660cb6e03adb062d901bc9072c21dc5bbcc14029425d3e1b5bf98c24db4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37e3660cb6e03adb062d901bc9072c21dc5bbcc14029425d3e1b5bf98c24db4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e3660cb6e03adb062d901bc9072c21dc5bbcc14029425d3e1b5bf98c24db4e"}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37e3660cb6e03adb062d901bc9072c21dc5bbcc14029425d3e1b5bf98c24db4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37e3660cb6e03adb062d901bc9072c21dc5bbcc14029425d3e1b5bf98c24db4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37e3660cb6e03adb062d901bc9072c21dc5bbcc14029425d3e1b5bf98c24db4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37e3660cb6e03adb062d901bc9072c21dc5bbcc14029425d3e1b5bf98c24db4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef"}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e3660cb6e03adb062d901bc9072c21dc5bbcc14029425d3e1b5bf98c24db4e"}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e"}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e"}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494"}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e"}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494"}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e65844cce00152f780fff0a4d6bf93cc8ae30c570e9627ba9468477811ee7925","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e"}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e65844cce00152f780fff0a4d6bf93cc8ae30c570e9627ba9468477811ee7925","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494"}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e65844cce00152f780fff0a4d6bf93cc8ae30c570e9627ba9468477811ee7925"}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e65844cce00152f780fff0a4d6bf93cc8ae30c570e9627ba9468477811ee7925","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e65844cce00152f780fff0a4d6bf93cc8ae30c570e9627ba9468477811ee7925"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e65844cce00152f780fff0a4d6bf93cc8ae30c570e9627ba9468477811ee7925","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6"}
{"level":"info","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494"}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e65844cce00152f780fff0a4d6bf93cc8ae30c570e9627ba9468477811ee7925","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6"}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70d987281aae674758061e8969737a3618a6d6bf8a38413b17475571cf718b4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70d987281aae674758061e8969737a3618a6d6bf8a38413b17475571cf718b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d987281aae674758061e8969737a3618a6d6bf8a38413b17475571cf718b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d987281aae674758061e8969737a3618a6d6bf8a38413b17475571cf718b4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e65844cce00152f780fff0a4d6bf93cc8ae30c570e9627ba9468477811ee7925"}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d987281aae674758061e8969737a3618a6d6bf8a38413b17475571cf718b4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e"}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6"}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70d987281aae674758061e8969737a3618a6d6bf8a38413b17475571cf718b4d"}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70d987281aae674758061e8969737a3618a6d6bf8a38413b17475571cf718b4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70d987281aae674758061e8969737a3618a6d6bf8a38413b17475571cf718b4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70d987281aae674758061e8969737a3618a6d6bf8a38413b17475571cf718b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d987281aae674758061e8969737a3618a6d6bf8a38413b17475571cf718b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494"}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70d987281aae674758061e8969737a3618a6d6bf8a38413b17475571cf718b4d"}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25"}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25"}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25"}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25"}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25"}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"}
{"level":"error","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"}
{"level":"info","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d7f9473-4567-462a-a639-00d448d7ec69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44224","PortSpecifier":{"PortValue":44224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d7f9473-4567-462a-a639-00d448d7ec69","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d7f9473-4567-462a-a639-00d448d7ec69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44224","PortSpecifier":{"PortValue":44224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131576,"nanos":274128931},"http":{"id":"2d7f9473-4567-462a-a639-00d448d7ec69","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d7f9473-4567-462a-a639-00d448d7ec69","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d7f9473-4567-462a-a639-00d448d7ec69","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d7f9473-4567-462a-a639-00d448d7ec69","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d7f9473-4567-462a-a639-00d448d7ec69","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d7f9473-4567-462a-a639-00d448d7ec69","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d7f9473-4567-462a-a639-00d448d7ec69","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/auth-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d7f9473-4567-462a-a639-00d448d7ec69","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d7f9473-4567-462a-a639-00d448d7ec69","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d7f9473-4567-462a-a639-00d448d7ec69","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d7f9473-4567-462a-a639-00d448d7ec69","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d7f9473-4567-462a-a639-00d448d7ec69","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a3a63c3-fea6-49b1-a584-7940e6963b46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35714","PortSpecifier":{"PortValue":35714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a3a63c3-fea6-49b1-a584-7940e6963b46","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a3a63c3-fea6-49b1-a584-7940e6963b46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35714","PortSpecifier":{"PortValue":35714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131576,"nanos":335000395},"http":{"id":"3a3a63c3-fea6-49b1-a584-7940e6963b46","method":"POST","headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3a3a63c3-fea6-49b1-a584-7940e6963b46","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a3a63c3-fea6-49b1-a584-7940e6963b46","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a3a63c3-fea6-49b1-a584-7940e6963b46","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a3a63c3-fea6-49b1-a584-7940e6963b46","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a3a63c3-fea6-49b1-a584-7940e6963b46","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a3a63c3-fea6-49b1-a584-7940e6963b46","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bcb615/auth-test-model-bcb615\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bcb615/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3a3a63c3-fea6-49b1-a584-7940e6963b46","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a3a63c3-fea6-49b1-a584-7940e6963b46","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a3a63c3-fea6-49b1-a584-7940e6963b46","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a3a63c3-fea6-49b1-a584-7940e6963b46","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a3a63c3-fea6-49b1-a584-7940e6963b46","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b42ebf1a-9168-44ae-9f0f-7632ed7aac4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44232","PortSpecifier":{"PortValue":44232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b42ebf1a-9168-44ae-9f0f-7632ed7aac4b","method":"GET","path":"/maas-api/v1/api-keys/cbca44f2-84e1-444a-a58c-2cfc338880ed","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b42ebf1a-9168-44ae-9f0f-7632ed7aac4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44232","PortSpecifier":{"PortValue":44232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131576,"nanos":403744300},"http":{"id":"b42ebf1a-9168-44ae-9f0f-7632ed7aac4b","method":"GET","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cbca44f2-84e1-444a-a58c-2cfc338880ed",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b42ebf1a-9168-44ae-9f0f-7632ed7aac4b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b42ebf1a-9168-44ae-9f0f-7632ed7aac4b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b42ebf1a-9168-44ae-9f0f-7632ed7aac4b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cbca44f2-84e1-444a-a58c-2cfc338880ed",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b42ebf1a-9168-44ae-9f0f-7632ed7aac4b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b42ebf1a-9168-44ae-9f0f-7632ed7aac4b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b42ebf1a-9168-44ae-9f0f-7632ed7aac4b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/auth-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b42ebf1a-9168-44ae-9f0f-7632ed7aac4b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b42ebf1a-9168-44ae-9f0f-7632ed7aac4b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b42ebf1a-9168-44ae-9f0f-7632ed7aac4b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b42ebf1a-9168-44ae-9f0f-7632ed7aac4b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b42ebf1a-9168-44ae-9f0f-7632ed7aac4b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d505c4fc-8843-41a4-b174-7ee97d09081e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35724","PortSpecifier":{"PortValue":35724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d505c4fc-8843-41a4-b174-7ee97d09081e","method":"GET","path":"/maas-api/v1/api-keys/09cfd070-bbb5-47fd-bc5e-055829845ee4","host":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d505c4fc-8843-41a4-b174-7ee97d09081e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35724","PortSpecifier":{"PortValue":35724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131576,"nanos":442103716},"http":{"id":"d505c4fc-8843-41a4-b174-7ee97d09081e","method":"GET","headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/09cfd070-bbb5-47fd-bc5e-055829845ee4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d505c4fc-8843-41a4-b174-7ee97d09081e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d505c4fc-8843-41a4-b174-7ee97d09081e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d505c4fc-8843-41a4-b174-7ee97d09081e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/09cfd070-bbb5-47fd-bc5e-055829845ee4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d505c4fc-8843-41a4-b174-7ee97d09081e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d505c4fc-8843-41a4-b174-7ee97d09081e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d505c4fc-8843-41a4-b174-7ee97d09081e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bcb615/auth-test-model-bcb615\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bcb615/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d505c4fc-8843-41a4-b174-7ee97d09081e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d505c4fc-8843-41a4-b174-7ee97d09081e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d505c4fc-8843-41a4-b174-7ee97d09081e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d505c4fc-8843-41a4-b174-7ee97d09081e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:06:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d505c4fc-8843-41a4-b174-7ee97d09081e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"407025bd-9b5a-48ce-a493-f8766be9ebc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59866","PortSpecifier":{"PortValue":59866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"407025bd-9b5a-48ce-a493-f8766be9ebc2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"407025bd-9b5a-48ce-a493-f8766be9ebc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59866","PortSpecifier":{"PortValue":59866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131593,"nanos":591172658},"http":{"id":"407025bd-9b5a-48ce-a493-f8766be9ebc2","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"407025bd-9b5a-48ce-a493-f8766be9ebc2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"407025bd-9b5a-48ce-a493-f8766be9ebc2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"407025bd-9b5a-48ce-a493-f8766be9ebc2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"407025bd-9b5a-48ce-a493-f8766be9ebc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"407025bd-9b5a-48ce-a493-f8766be9ebc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"407025bd-9b5a-48ce-a493-f8766be9ebc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/auth-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"407025bd-9b5a-48ce-a493-f8766be9ebc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"407025bd-9b5a-48ce-a493-f8766be9ebc2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"407025bd-9b5a-48ce-a493-f8766be9ebc2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"407025bd-9b5a-48ce-a493-f8766be9ebc2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"407025bd-9b5a-48ce-a493-f8766be9ebc2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e9364db-fa77-496e-acd1-434b89c452c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57976","PortSpecifier":{"PortValue":57976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e9364db-fa77-496e-acd1-434b89c452c0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e9364db-fa77-496e-acd1-434b89c452c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57976","PortSpecifier":{"PortValue":57976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131593,"nanos":630885431},"http":{"id":"1e9364db-fa77-496e-acd1-434b89c452c0","method":"POST","headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1e9364db-fa77-496e-acd1-434b89c452c0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e9364db-fa77-496e-acd1-434b89c452c0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e9364db-fa77-496e-acd1-434b89c452c0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e9364db-fa77-496e-acd1-434b89c452c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e9364db-fa77-496e-acd1-434b89c452c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e9364db-fa77-496e-acd1-434b89c452c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bcb615/auth-test-model-bcb615\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bcb615/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e9364db-fa77-496e-acd1-434b89c452c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e9364db-fa77-496e-acd1-434b89c452c0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e9364db-fa77-496e-acd1-434b89c452c0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e9364db-fa77-496e-acd1-434b89c452c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e9364db-fa77-496e-acd1-434b89c452c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c411b0f3-83f0-4a2c-8d52-9e634c6271ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59882","PortSpecifier":{"PortValue":59882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c411b0f3-83f0-4a2c-8d52-9e634c6271ab","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c411b0f3-83f0-4a2c-8d52-9e634c6271ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59882","PortSpecifier":{"PortValue":59882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131593,"nanos":670534386},"http":{"id":"c411b0f3-83f0-4a2c-8d52-9e634c6271ab","method":"GET","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c411b0f3-83f0-4a2c-8d52-9e634c6271ab","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UctPY1mhxVKuEFLA_W8PxXhDO7pDajcRAjra8jZglMgGQmysEzZ0Lwl9e7Zq"}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c411b0f3-83f0-4a2c-8d52-9e634c6271ab","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UctPY1mhxVKuEFLA_W8PxXhDO7pDajcRAjra8jZglMgGQmysEzZ0Lwl9e7Zq\"}"}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c411b0f3-83f0-4a2c-8d52-9e634c6271ab","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"21c4fca6-5c38-47f7-b36f-e11f9c3827d4","keyName":"e2e-auth-iso-a-003261","subscription":"e2e-auth-iso-c192cb","tenant":"e2e-shared-a-0e8a6d","userId":"21c4fca6-5c38-47f7-b36f-e11f9c3827d4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c411b0f3-83f0-4a2c-8d52-9e634c6271ab","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c411b0f3-83f0-4a2c-8d52-9e634c6271ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c411b0f3-83f0-4a2c-8d52-9e634c6271ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c411b0f3-83f0-4a2c-8d52-9e634c6271ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/auth-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c411b0f3-83f0-4a2c-8d52-9e634c6271ab","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c411b0f3-83f0-4a2c-8d52-9e634c6271ab","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-c192cb"}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c411b0f3-83f0-4a2c-8d52-9e634c6271ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c411b0f3-83f0-4a2c-8d52-9e634c6271ab","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c411b0f3-83f0-4a2c-8d52-9e634c6271ab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c411b0f3-83f0-4a2c-8d52-9e634c6271ab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2bf9a124-a263-9599-bb30-3d983e4449ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60152","PortSpecifier":{"PortValue":60152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2bf9a124-a263-9599-bb30-3d983e4449ff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2bf9a124-a263-9599-bb30-3d983e4449ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60152","PortSpecifier":{"PortValue":60152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131611,"nanos":814764391},"http":{"id":"2bf9a124-a263-9599-bb30-3d983e4449ff","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2bf9a124-a263-9599-bb30-3d983e4449ff","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2bf9a124-a263-9599-bb30-3d983e4449ff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2bf9a124-a263-9599-bb30-3d983e4449ff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2bf9a124-a263-9599-bb30-3d983e4449ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2bf9a124-a263-9599-bb30-3d983e4449ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2bf9a124-a263-9599-bb30-3d983e4449ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/auth-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2bf9a124-a263-9599-bb30-3d983e4449ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2bf9a124-a263-9599-bb30-3d983e4449ff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2bf9a124-a263-9599-bb30-3d983e4449ff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2bf9a124-a263-9599-bb30-3d983e4449ff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2bf9a124-a263-9599-bb30-3d983e4449ff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af27fd64-30ab-4151-8aa0-d9a007a557f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58832","PortSpecifier":{"PortValue":58832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af27fd64-30ab-4151-8aa0-d9a007a557f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af27fd64-30ab-4151-8aa0-d9a007a557f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58832","PortSpecifier":{"PortValue":58832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131611,"nanos":852360100},"http":{"id":"af27fd64-30ab-4151-8aa0-d9a007a557f9","method":"POST","headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"af27fd64-30ab-4151-8aa0-d9a007a557f9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af27fd64-30ab-4151-8aa0-d9a007a557f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af27fd64-30ab-4151-8aa0-d9a007a557f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af27fd64-30ab-4151-8aa0-d9a007a557f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af27fd64-30ab-4151-8aa0-d9a007a557f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af27fd64-30ab-4151-8aa0-d9a007a557f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bcb615/auth-test-model-bcb615\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bcb615/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af27fd64-30ab-4151-8aa0-d9a007a557f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af27fd64-30ab-4151-8aa0-d9a007a557f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af27fd64-30ab-4151-8aa0-d9a007a557f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af27fd64-30ab-4151-8aa0-d9a007a557f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af27fd64-30ab-4151-8aa0-d9a007a557f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6962d072-77d0-48b3-88b7-ce56c156f6cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58846","PortSpecifier":{"PortValue":58846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6962d072-77d0-48b3-88b7-ce56c156f6cb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6962d072-77d0-48b3-88b7-ce56c156f6cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58846","PortSpecifier":{"PortValue":58846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131611,"nanos":896523244},"http":{"id":"6962d072-77d0-48b3-88b7-ce56c156f6cb","method":"GET","headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6962d072-77d0-48b3-88b7-ce56c156f6cb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XXRauLIfb7MHjQhl_WtHVVTgFlyAKIPLRrbYTHtjLeBEeIplrlftRmQpiIvl"}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6962d072-77d0-48b3-88b7-ce56c156f6cb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-bcb615.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XXRauLIfb7MHjQhl_WtHVVTgFlyAKIPLRrbYTHtjLeBEeIplrlftRmQpiIvl\"}"}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6962d072-77d0-48b3-88b7-ce56c156f6cb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bcb615.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6962d072-77d0-48b3-88b7-ce56c156f6cb","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6962d072-77d0-48b3-88b7-ce56c156f6cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6962d072-77d0-48b3-88b7-ce56c156f6cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bcb615/auth-test-model-bcb615\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bcb615/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"6962d072-77d0-48b3-88b7-ce56c156f6cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6962d072-77d0-48b3-88b7-ce56c156f6cb","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-15T16:06:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6962d072-77d0-48b3-88b7-ce56c156f6cb","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3427f41a-cc31-42f0-8e41-ce1c17d3f76b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54034","PortSpecifier":{"PortValue":54034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3427f41a-cc31-42f0-8e41-ce1c17d3f76b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3427f41a-cc31-42f0-8e41-ce1c17d3f76b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54034","PortSpecifier":{"PortValue":54034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131629,"nanos":7917916},"http":{"id":"3427f41a-cc31-42f0-8e41-ce1c17d3f76b","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3427f41a-cc31-42f0-8e41-ce1c17d3f76b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3427f41a-cc31-42f0-8e41-ce1c17d3f76b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3427f41a-cc31-42f0-8e41-ce1c17d3f76b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3427f41a-cc31-42f0-8e41-ce1c17d3f76b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3427f41a-cc31-42f0-8e41-ce1c17d3f76b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3427f41a-cc31-42f0-8e41-ce1c17d3f76b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/auth-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3427f41a-cc31-42f0-8e41-ce1c17d3f76b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3427f41a-cc31-42f0-8e41-ce1c17d3f76b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3427f41a-cc31-42f0-8e41-ce1c17d3f76b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3427f41a-cc31-42f0-8e41-ce1c17d3f76b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3427f41a-cc31-42f0-8e41-ce1c17d3f76b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53bb96bf-577f-4df3-9465-ac22d05179f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41806","PortSpecifier":{"PortValue":41806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53bb96bf-577f-4df3-9465-ac22d05179f3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53bb96bf-577f-4df3-9465-ac22d05179f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41806","PortSpecifier":{"PortValue":41806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131629,"nanos":45453868},"http":{"id":"53bb96bf-577f-4df3-9465-ac22d05179f3","method":"POST","headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"53bb96bf-577f-4df3-9465-ac22d05179f3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53bb96bf-577f-4df3-9465-ac22d05179f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53bb96bf-577f-4df3-9465-ac22d05179f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53bb96bf-577f-4df3-9465-ac22d05179f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53bb96bf-577f-4df3-9465-ac22d05179f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53bb96bf-577f-4df3-9465-ac22d05179f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bcb615/auth-test-model-bcb615\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bcb615/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"53bb96bf-577f-4df3-9465-ac22d05179f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53bb96bf-577f-4df3-9465-ac22d05179f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53bb96bf-577f-4df3-9465-ac22d05179f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53bb96bf-577f-4df3-9465-ac22d05179f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53bb96bf-577f-4df3-9465-ac22d05179f3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31c4bad0-da63-4811-88a5-f84612ddd9a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54044","PortSpecifier":{"PortValue":54044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31c4bad0-da63-4811-88a5-f84612ddd9a4","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31c4bad0-da63-4811-88a5-f84612ddd9a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54044","PortSpecifier":{"PortValue":54044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131629,"nanos":85877311},"http":{"id":"31c4bad0-da63-4811-88a5-f84612ddd9a4","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"31c4bad0-da63-4811-88a5-f84612ddd9a4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31c4bad0-da63-4811-88a5-f84612ddd9a4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31c4bad0-da63-4811-88a5-f84612ddd9a4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c4bad0-da63-4811-88a5-f84612ddd9a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c4bad0-da63-4811-88a5-f84612ddd9a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c4bad0-da63-4811-88a5-f84612ddd9a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/auth-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"31c4bad0-da63-4811-88a5-f84612ddd9a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31c4bad0-da63-4811-88a5-f84612ddd9a4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31c4bad0-da63-4811-88a5-f84612ddd9a4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31c4bad0-da63-4811-88a5-f84612ddd9a4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31c4bad0-da63-4811-88a5-f84612ddd9a4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1b25da3-dcff-4d6a-b8dd-f1149a06aa53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41822","PortSpecifier":{"PortValue":41822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1b25da3-dcff-4d6a-b8dd-f1149a06aa53","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1b25da3-dcff-4d6a-b8dd-f1149a06aa53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41822","PortSpecifier":{"PortValue":41822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131629,"nanos":122161758},"http":{"id":"c1b25da3-dcff-4d6a-b8dd-f1149a06aa53","method":"POST","headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c1b25da3-dcff-4d6a-b8dd-f1149a06aa53","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1b25da3-dcff-4d6a-b8dd-f1149a06aa53","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1b25da3-dcff-4d6a-b8dd-f1149a06aa53","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b25da3-dcff-4d6a-b8dd-f1149a06aa53","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b25da3-dcff-4d6a-b8dd-f1149a06aa53","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b25da3-dcff-4d6a-b8dd-f1149a06aa53","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bcb615/auth-test-model-bcb615\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bcb615/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1b25da3-dcff-4d6a-b8dd-f1149a06aa53","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1b25da3-dcff-4d6a-b8dd-f1149a06aa53","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1b25da3-dcff-4d6a-b8dd-f1149a06aa53","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1b25da3-dcff-4d6a-b8dd-f1149a06aa53","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:07:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1b25da3-dcff-4d6a-b8dd-f1149a06aa53","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8c4cfbf-4dbf-4ccb-a1cf-f9fd62450742","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47918","PortSpecifier":{"PortValue":47918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8c4cfbf-4dbf-4ccb-a1cf-f9fd62450742","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8c4cfbf-4dbf-4ccb-a1cf-f9fd62450742","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47918","PortSpecifier":{"PortValue":47918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131646,"nanos":324851364},"http":{"id":"d8c4cfbf-4dbf-4ccb-a1cf-f9fd62450742","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d8c4cfbf-4dbf-4ccb-a1cf-f9fd62450742","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8c4cfbf-4dbf-4ccb-a1cf-f9fd62450742","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8c4cfbf-4dbf-4ccb-a1cf-f9fd62450742","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8c4cfbf-4dbf-4ccb-a1cf-f9fd62450742","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8c4cfbf-4dbf-4ccb-a1cf-f9fd62450742","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8c4cfbf-4dbf-4ccb-a1cf-f9fd62450742","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/auth-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d8c4cfbf-4dbf-4ccb-a1cf-f9fd62450742","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8c4cfbf-4dbf-4ccb-a1cf-f9fd62450742","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8c4cfbf-4dbf-4ccb-a1cf-f9fd62450742","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8c4cfbf-4dbf-4ccb-a1cf-f9fd62450742","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8c4cfbf-4dbf-4ccb-a1cf-f9fd62450742","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1cab2dc8-7b6e-456b-87a7-457142e9dd6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56234","PortSpecifier":{"PortValue":56234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1cab2dc8-7b6e-456b-87a7-457142e9dd6d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1cab2dc8-7b6e-456b-87a7-457142e9dd6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56234","PortSpecifier":{"PortValue":56234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131646,"nanos":363109239},"http":{"id":"1cab2dc8-7b6e-456b-87a7-457142e9dd6d","method":"POST","headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1cab2dc8-7b6e-456b-87a7-457142e9dd6d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1cab2dc8-7b6e-456b-87a7-457142e9dd6d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1cab2dc8-7b6e-456b-87a7-457142e9dd6d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1cab2dc8-7b6e-456b-87a7-457142e9dd6d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1cab2dc8-7b6e-456b-87a7-457142e9dd6d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1cab2dc8-7b6e-456b-87a7-457142e9dd6d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bcb615/auth-test-model-bcb615\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bcb615/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1cab2dc8-7b6e-456b-87a7-457142e9dd6d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1cab2dc8-7b6e-456b-87a7-457142e9dd6d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1cab2dc8-7b6e-456b-87a7-457142e9dd6d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1cab2dc8-7b6e-456b-87a7-457142e9dd6d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1cab2dc8-7b6e-456b-87a7-457142e9dd6d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03a55847-9bf6-4ac4-a809-61e708955a54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56242","PortSpecifier":{"PortValue":56242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03a55847-9bf6-4ac4-a809-61e708955a54","method":"GET","path":"/maas-api/v1/api-keys/c43eeec3-326e-4fba-97b5-0ab59333813e","host":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03a55847-9bf6-4ac4-a809-61e708955a54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56242","PortSpecifier":{"PortValue":56242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131646,"nanos":401532705},"http":{"id":"03a55847-9bf6-4ac4-a809-61e708955a54","method":"GET","headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c43eeec3-326e-4fba-97b5-0ab59333813e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"03a55847-9bf6-4ac4-a809-61e708955a54","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03a55847-9bf6-4ac4-a809-61e708955a54","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03a55847-9bf6-4ac4-a809-61e708955a54","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c43eeec3-326e-4fba-97b5-0ab59333813e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03a55847-9bf6-4ac4-a809-61e708955a54","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03a55847-9bf6-4ac4-a809-61e708955a54","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03a55847-9bf6-4ac4-a809-61e708955a54","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bcb615/auth-test-model-bcb615\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bcb615/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03a55847-9bf6-4ac4-a809-61e708955a54","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03a55847-9bf6-4ac4-a809-61e708955a54","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03a55847-9bf6-4ac4-a809-61e708955a54","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03a55847-9bf6-4ac4-a809-61e708955a54","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03a55847-9bf6-4ac4-a809-61e708955a54","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78cabdb9-94e7-4456-b1fe-7c4806d0898d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47934","PortSpecifier":{"PortValue":47934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78cabdb9-94e7-4456-b1fe-7c4806d0898d","method":"GET","path":"/maas-api/v1/api-keys/c43eeec3-326e-4fba-97b5-0ab59333813e","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78cabdb9-94e7-4456-b1fe-7c4806d0898d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47934","PortSpecifier":{"PortValue":47934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131646,"nanos":431086915},"http":{"id":"78cabdb9-94e7-4456-b1fe-7c4806d0898d","method":"GET","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c43eeec3-326e-4fba-97b5-0ab59333813e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"78cabdb9-94e7-4456-b1fe-7c4806d0898d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78cabdb9-94e7-4456-b1fe-7c4806d0898d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78cabdb9-94e7-4456-b1fe-7c4806d0898d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c43eeec3-326e-4fba-97b5-0ab59333813e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78cabdb9-94e7-4456-b1fe-7c4806d0898d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78cabdb9-94e7-4456-b1fe-7c4806d0898d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78cabdb9-94e7-4456-b1fe-7c4806d0898d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/auth-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78cabdb9-94e7-4456-b1fe-7c4806d0898d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78cabdb9-94e7-4456-b1fe-7c4806d0898d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78cabdb9-94e7-4456-b1fe-7c4806d0898d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78cabdb9-94e7-4456-b1fe-7c4806d0898d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:07:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78cabdb9-94e7-4456-b1fe-7c4806d0898d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4912a2e5-76db-4ec6-84a4-b0ff17f3c9e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54544","PortSpecifier":{"PortValue":54544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4912a2e5-76db-4ec6-84a4-b0ff17f3c9e4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4912a2e5-76db-4ec6-84a4-b0ff17f3c9e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54544","PortSpecifier":{"PortValue":54544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131663,"nanos":627765134},"http":{"id":"4912a2e5-76db-4ec6-84a4-b0ff17f3c9e4","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4912a2e5-76db-4ec6-84a4-b0ff17f3c9e4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4912a2e5-76db-4ec6-84a4-b0ff17f3c9e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4912a2e5-76db-4ec6-84a4-b0ff17f3c9e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4912a2e5-76db-4ec6-84a4-b0ff17f3c9e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4912a2e5-76db-4ec6-84a4-b0ff17f3c9e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4912a2e5-76db-4ec6-84a4-b0ff17f3c9e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/auth-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4912a2e5-76db-4ec6-84a4-b0ff17f3c9e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4912a2e5-76db-4ec6-84a4-b0ff17f3c9e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4912a2e5-76db-4ec6-84a4-b0ff17f3c9e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4912a2e5-76db-4ec6-84a4-b0ff17f3c9e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4912a2e5-76db-4ec6-84a4-b0ff17f3c9e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa51e91e-7b0d-4603-b65c-5f242d8b66e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40270","PortSpecifier":{"PortValue":40270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa51e91e-7b0d-4603-b65c-5f242d8b66e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa51e91e-7b0d-4603-b65c-5f242d8b66e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40270","PortSpecifier":{"PortValue":40270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131663,"nanos":665365685},"http":{"id":"fa51e91e-7b0d-4603-b65c-5f242d8b66e7","method":"POST","headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa51e91e-7b0d-4603-b65c-5f242d8b66e7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa51e91e-7b0d-4603-b65c-5f242d8b66e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa51e91e-7b0d-4603-b65c-5f242d8b66e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa51e91e-7b0d-4603-b65c-5f242d8b66e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa51e91e-7b0d-4603-b65c-5f242d8b66e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bcb615/auth-test-model-bcb615\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bcb615/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa51e91e-7b0d-4603-b65c-5f242d8b66e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa51e91e-7b0d-4603-b65c-5f242d8b66e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa51e91e-7b0d-4603-b65c-5f242d8b66e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa51e91e-7b0d-4603-b65c-5f242d8b66e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa51e91e-7b0d-4603-b65c-5f242d8b66e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa51e91e-7b0d-4603-b65c-5f242d8b66e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4bf42ab2-4cb7-4ad3-8c71-81c3040d3db3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54560","PortSpecifier":{"PortValue":54560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4bf42ab2-4cb7-4ad3-8c71-81c3040d3db3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4bf42ab2-4cb7-4ad3-8c71-81c3040d3db3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54560","PortSpecifier":{"PortValue":54560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131663,"nanos":709425970},"http":{"id":"4bf42ab2-4cb7-4ad3-8c71-81c3040d3db3","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4bf42ab2-4cb7-4ad3-8c71-81c3040d3db3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cKLYyRJymmx0IYeu_4pmvdJ7NaJoLDqwO9Rvfj5SNw1F30PiFVWGO4r124ta"}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4bf42ab2-4cb7-4ad3-8c71-81c3040d3db3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cKLYyRJymmx0IYeu_4pmvdJ7NaJoLDqwO9Rvfj5SNw1F30PiFVWGO4r124ta\"}"}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4bf42ab2-4cb7-4ad3-8c71-81c3040d3db3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"362742c9-3a9b-4b9e-ba46-1a55395dabaa","keyName":"e2e-auth-iso-a-7dbaa4","subscription":"e2e-auth-iso-7d7e33","tenant":"e2e-shared-a-0e8a6d","userId":"362742c9-3a9b-4b9e-ba46-1a55395dabaa","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4bf42ab2-4cb7-4ad3-8c71-81c3040d3db3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bf42ab2-4cb7-4ad3-8c71-81c3040d3db3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bf42ab2-4cb7-4ad3-8c71-81c3040d3db3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bf42ab2-4cb7-4ad3-8c71-81c3040d3db3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/auth-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4bf42ab2-4cb7-4ad3-8c71-81c3040d3db3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bf42ab2-4cb7-4ad3-8c71-81c3040d3db3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bf42ab2-4cb7-4ad3-8c71-81c3040d3db3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bf42ab2-4cb7-4ad3-8c71-81c3040d3db3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-7d7e33"}
{"level":"info","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4bf42ab2-4cb7-4ad3-8c71-81c3040d3db3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:07:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4bf42ab2-4cb7-4ad3-8c71-81c3040d3db3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b41de5eddad745b25ee08f27f413e517c349b8a942d114369f82b1f4278a6e60"}
{"level":"info","ts":"2026-07-15T16:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37e3660cb6e03adb062d901bc9072c21dc5bbcc14029425d3e1b5bf98c24db4e"}
{"level":"info","ts":"2026-07-15T16:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4342d000388347f42cbc6f8a9b411c310420d4a68b3b61b4e57d5165b3a41929"}
{"level":"info","ts":"2026-07-15T16:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed5dc5d3040beb826858f09f84f1cb64ad9473581b60857ae72266b9e5e7ef25"}
{"level":"info","ts":"2026-07-15T16:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70d987281aae674758061e8969737a3618a6d6bf8a38413b17475571cf718b4d"}
{"level":"info","ts":"2026-07-15T16:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fa359be902ff078bcbc0d4917b1a5aabafac5acdbeb45d9c1490f0de818e88f"}
{"level":"info","ts":"2026-07-15T16:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3930899e807c8ed0353bf9af3666c2a6bd0a90e96fce0ee5766c764edc68c274"}
{"level":"info","ts":"2026-07-15T16:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b642eeb6bb9ac69293a38a71c40111312d932aa69c77b3de961761c4b826bc11"}
{"level":"info","ts":"2026-07-15T16:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5557ed12bc39302fc698c8906895f2a243797c010d798b2fdfc17a2ade158fef"}
{"level":"info","ts":"2026-07-15T16:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e65844cce00152f780fff0a4d6bf93cc8ae30c570e9627ba9468477811ee7925"}
{"level":"info","ts":"2026-07-15T16:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2f9b76e76dfc5218d698fb34890eb26697ded066323a0327d27f082c562e1c1"}
{"level":"info","ts":"2026-07-15T16:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa78adf3c97ddf813d148ea80345e06f8bc0152db1c1e945ca2730254c8e4008"}
{"level":"info","ts":"2026-07-15T16:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/185ecde46c3fc13da0ed808281d9e4fb0b3111f3c75298b83ea47d24819535af"}
{"level":"info","ts":"2026-07-15T16:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ab55b3ac9a17fb6325996745423f9b68740d9ed221f654b4c3a6e7c87b4da5e"}
{"level":"info","ts":"2026-07-15T16:07:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df2e6ab9ede4c88163b44decda649da21f03f9b3c02619b6e0be7b219da10089"}
{"level":"info","ts":"2026-07-15T16:07:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b0de0eb396d49e99e09232a7dd6eefae0424740894a2d013d0bb0307c311c11"}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6"}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6"}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6"}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6"}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49da92d8c6bce1f2b18941749597f8b56870ad60c6204d019401414733fa2c84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49da92d8c6bce1f2b18941749597f8b56870ad60c6204d019401414733fa2c84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49da92d8c6bce1f2b18941749597f8b56870ad60c6204d019401414733fa2c84"}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49da92d8c6bce1f2b18941749597f8b56870ad60c6204d019401414733fa2c84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49da92d8c6bce1f2b18941749597f8b56870ad60c6204d019401414733fa2c84"}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49da92d8c6bce1f2b18941749597f8b56870ad60c6204d019401414733fa2c84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49da92d8c6bce1f2b18941749597f8b56870ad60c6204d019401414733fa2c84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49da92d8c6bce1f2b18941749597f8b56870ad60c6204d019401414733fa2c84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49da92d8c6bce1f2b18941749597f8b56870ad60c6204d019401414733fa2c84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6"}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49da92d8c6bce1f2b18941749597f8b56870ad60c6204d019401414733fa2c84"}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f70d474b8dd123b1437b34f695a58462e3dd271c62acf060840d4e0678254a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f70d474b8dd123b1437b34f695a58462e3dd271c62acf060840d4e0678254a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f70d474b8dd123b1437b34f695a58462e3dd271c62acf060840d4e0678254a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f70d474b8dd123b1437b34f695a58462e3dd271c62acf060840d4e0678254a2"}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f70d474b8dd123b1437b34f695a58462e3dd271c62acf060840d4e0678254a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f70d474b8dd123b1437b34f695a58462e3dd271c62acf060840d4e0678254a2"}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f70d474b8dd123b1437b34f695a58462e3dd271c62acf060840d4e0678254a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f70d474b8dd123b1437b34f695a58462e3dd271c62acf060840d4e0678254a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f70d474b8dd123b1437b34f695a58462e3dd271c62acf060840d4e0678254a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f70d474b8dd123b1437b34f695a58462e3dd271c62acf060840d4e0678254a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f70d474b8dd123b1437b34f695a58462e3dd271c62acf060840d4e0678254a2"}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ebea162e1d8b0a236f80b3e690b0c557d4943e1d0971c1e1c31ee4571cdcf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ebea162e1d8b0a236f80b3e690b0c557d4943e1d0971c1e1c31ee4571cdcf6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ebea162e1d8b0a236f80b3e690b0c557d4943e1d0971c1e1c31ee4571cdcf6"}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ebea162e1d8b0a236f80b3e690b0c557d4943e1d0971c1e1c31ee4571cdcf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ebea162e1d8b0a236f80b3e690b0c557d4943e1d0971c1e1c31ee4571cdcf6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ebea162e1d8b0a236f80b3e690b0c557d4943e1d0971c1e1c31ee4571cdcf6"}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ebea162e1d8b0a236f80b3e690b0c557d4943e1d0971c1e1c31ee4571cdcf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4ebea162e1d8b0a236f80b3e690b0c557d4943e1d0971c1e1c31ee4571cdcf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ebea162e1d8b0a236f80b3e690b0c557d4943e1d0971c1e1c31ee4571cdcf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ebea162e1d8b0a236f80b3e690b0c557d4943e1d0971c1e1c31ee4571cdcf6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ebea162e1d8b0a236f80b3e690b0c557d4943e1d0971c1e1c31ee4571cdcf6"}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14"}
{"level":"info","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14"}
{"level":"debug","ts":"2026-07-15T16:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f3eb7b4f42f3740cc2708d04f89c2789843a4a4ed5ac2b2722c082e414c7b09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14"}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f3eb7b4f42f3740cc2708d04f89c2789843a4a4ed5ac2b2722c082e414c7b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f3eb7b4f42f3740cc2708d04f89c2789843a4a4ed5ac2b2722c082e414c7b09"}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5"}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f3eb7b4f42f3740cc2708d04f89c2789843a4a4ed5ac2b2722c082e414c7b09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f3eb7b4f42f3740cc2708d04f89c2789843a4a4ed5ac2b2722c082e414c7b09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14"}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f3eb7b4f42f3740cc2708d04f89c2789843a4a4ed5ac2b2722c082e414c7b09"}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f3eb7b4f42f3740cc2708d04f89c2789843a4a4ed5ac2b2722c082e414c7b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f3eb7b4f42f3740cc2708d04f89c2789843a4a4ed5ac2b2722c082e414c7b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5"}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f3eb7b4f42f3740cc2708d04f89c2789843a4a4ed5ac2b2722c082e414c7b09"}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771"}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5"}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771"}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771"}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771"}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771"}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771"}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771"}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11"}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11"}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11"}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11"}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af"}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11"}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af"}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11"}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af"}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af"}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af"}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92"}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92"}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92"}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce"}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce"}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce"}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad"}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce"}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad"}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce"}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad"}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"397020931ff5d1ec9cf7f4f79f228282bf226a06f3807aeb3964a9e3fa73069a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"397020931ff5d1ec9cf7f4f79f228282bf226a06f3807aeb3964a9e3fa73069a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce116a571b1d96f3b1970f09c5cd8675afdb9c0f09b90583236b92ea51cb99a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/397020931ff5d1ec9cf7f4f79f228282bf226a06f3807aeb3964a9e3fa73069a"}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce116a571b1d96f3b1970f09c5cd8675afdb9c0f09b90583236b92ea51cb99a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"397020931ff5d1ec9cf7f4f79f228282bf226a06f3807aeb3964a9e3fa73069a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["397020931ff5d1ec9cf7f4f79f228282bf226a06f3807aeb3964a9e3fa73069a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce116a571b1d96f3b1970f09c5cd8675afdb9c0f09b90583236b92ea51cb99a"}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"397020931ff5d1ec9cf7f4f79f228282bf226a06f3807aeb3964a9e3fa73069a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce116a571b1d96f3b1970f09c5cd8675afdb9c0f09b90583236b92ea51cb99a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fce116a571b1d96f3b1970f09c5cd8675afdb9c0f09b90583236b92ea51cb99a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/397020931ff5d1ec9cf7f4f79f228282bf226a06f3807aeb3964a9e3fa73069a"}
{"level":"info","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce116a571b1d96f3b1970f09c5cd8675afdb9c0f09b90583236b92ea51cb99a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"397020931ff5d1ec9cf7f4f79f228282bf226a06f3807aeb3964a9e3fa73069a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce116a571b1d96f3b1970f09c5cd8675afdb9c0f09b90583236b92ea51cb99a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce116a571b1d96f3b1970f09c5cd8675afdb9c0f09b90583236b92ea51cb99a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce116a571b1d96f3b1970f09c5cd8675afdb9c0f09b90583236b92ea51cb99a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce116a571b1d96f3b1970f09c5cd8675afdb9c0f09b90583236b92ea51cb99a"}
{"level":"debug","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce116a571b1d96f3b1970f09c5cd8675afdb9c0f09b90583236b92ea51cb99a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fce116a571b1d96f3b1970f09c5cd8675afdb9c0f09b90583236b92ea51cb99a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce116a571b1d96f3b1970f09c5cd8675afdb9c0f09b90583236b92ea51cb99a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce116a571b1d96f3b1970f09c5cd8675afdb9c0f09b90583236b92ea51cb99a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/397020931ff5d1ec9cf7f4f79f228282bf226a06f3807aeb3964a9e3fa73069a"}
{"level":"debug","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce116a571b1d96f3b1970f09c5cd8675afdb9c0f09b90583236b92ea51cb99a"}
{"level":"debug","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149"}
{"level":"debug","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149"}
{"level":"debug","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149"}
{"level":"debug","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149"}
{"level":"debug","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149"}
{"level":"debug","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149"}
{"level":"debug","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149"}
{"level":"debug","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14"}
{"level":"debug","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14"}
{"level":"debug","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14"}
{"level":"info","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14"}
{"level":"debug","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14"}
{"level":"info","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14"}
{"level":"debug","ts":"2026-07-15T16:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14"}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92"}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92"}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92"}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92"}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92"}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ebea162e1d8b0a236f80b3e690b0c557d4943e1d0971c1e1c31ee4571cdcf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92"}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ebea162e1d8b0a236f80b3e690b0c557d4943e1d0971c1e1c31ee4571cdcf6"}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92"}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92"}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af"}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92"}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494"}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad"}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad"}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad"}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad"}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f3eb7b4f42f3740cc2708d04f89c2789843a4a4ed5ac2b2722c082e414c7b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad"}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f3eb7b4f42f3740cc2708d04f89c2789843a4a4ed5ac2b2722c082e414c7b09"}
{"level":"info","ts":"2026-07-15T16:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad"}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5"}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf"}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5"}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5"}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5"}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11"}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149"}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f70d474b8dd123b1437b34f695a58462e3dd271c62acf060840d4e0678254a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce"}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f70d474b8dd123b1437b34f695a58462e3dd271c62acf060840d4e0678254a2"}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ab135e72257e2f028d43236dd400eb6de3bed349a9d986bda9a2b3746fded79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5"}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6"}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ab135e72257e2f028d43236dd400eb6de3bed349a9d986bda9a2b3746fded79"}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49da92d8c6bce1f2b18941749597f8b56870ad60c6204d019401414733fa2c84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6"}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2f8516558d95848e12715578af79564f67e71c04615fe0d029ad9153ebc4eb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771"}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"397020931ff5d1ec9cf7f4f79f228282bf226a06f3807aeb3964a9e3fa73069a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"}
{"level":"debug","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce116a571b1d96f3b1970f09c5cd8675afdb9c0f09b90583236b92ea51cb99a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49da92d8c6bce1f2b18941749597f8b56870ad60c6204d019401414733fa2c84"}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2f8516558d95848e12715578af79564f67e71c04615fe0d029ad9153ebc4eb5"}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/397020931ff5d1ec9cf7f4f79f228282bf226a06f3807aeb3964a9e3fa73069a"}
{"level":"info","ts":"2026-07-15T16:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce116a571b1d96f3b1970f09c5cd8675afdb9c0f09b90583236b92ea51cb99a"}
{"level":"info","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"037e622b-72a5-4292-93b9-cc0266d2eecf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33904","PortSpecifier":{"PortValue":33904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"037e622b-72a5-4292-93b9-cc0266d2eecf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"037e622b-72a5-4292-93b9-cc0266d2eecf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33904","PortSpecifier":{"PortValue":33904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131745,"nanos":228431930},"http":{"id":"037e622b-72a5-4292-93b9-cc0266d2eecf","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"037e622b-72a5-4292-93b9-cc0266d2eecf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"037e622b-72a5-4292-93b9-cc0266d2eecf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"037e622b-72a5-4292-93b9-cc0266d2eecf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"037e622b-72a5-4292-93b9-cc0266d2eecf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"037e622b-72a5-4292-93b9-cc0266d2eecf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"037e622b-72a5-4292-93b9-cc0266d2eecf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/sub-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"037e622b-72a5-4292-93b9-cc0266d2eecf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"037e622b-72a5-4292-93b9-cc0266d2eecf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"037e622b-72a5-4292-93b9-cc0266d2eecf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"037e622b-72a5-4292-93b9-cc0266d2eecf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"037e622b-72a5-4292-93b9-cc0266d2eecf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2d03b10-e3ca-4b15-9c30-52ac62c64981","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52254","PortSpecifier":{"PortValue":52254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2d03b10-e3ca-4b15-9c30-52ac62c64981","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2d03b10-e3ca-4b15-9c30-52ac62c64981","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52254","PortSpecifier":{"PortValue":52254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131745,"nanos":294819794},"http":{"id":"d2d03b10-e3ca-4b15-9c30-52ac62c64981","method":"POST","headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d2d03b10-e3ca-4b15-9c30-52ac62c64981","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2d03b10-e3ca-4b15-9c30-52ac62c64981","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2d03b10-e3ca-4b15-9c30-52ac62c64981","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2d03b10-e3ca-4b15-9c30-52ac62c64981","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2d03b10-e3ca-4b15-9c30-52ac62c64981","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2d03b10-e3ca-4b15-9c30-52ac62c64981","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bcb615/sub-test-model-bcb615\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bcb615/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d2d03b10-e3ca-4b15-9c30-52ac62c64981","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2d03b10-e3ca-4b15-9c30-52ac62c64981","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2d03b10-e3ca-4b15-9c30-52ac62c64981","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2d03b10-e3ca-4b15-9c30-52ac62c64981","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2d03b10-e3ca-4b15-9c30-52ac62c64981","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"243ba696-a82f-4dfe-b07e-f363a66fba61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33914","PortSpecifier":{"PortValue":33914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"243ba696-a82f-4dfe-b07e-f363a66fba61","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"243ba696-a82f-4dfe-b07e-f363a66fba61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33914","PortSpecifier":{"PortValue":33914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131745,"nanos":337962841},"http":{"id":"243ba696-a82f-4dfe-b07e-f363a66fba61","method":"GET","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"243ba696-a82f-4dfe-b07e-f363a66fba61","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AwRbwtufjNSfOY27_MRPizbKtbPhAPAMHPFpJ2Rq2Mm4h9v1W9Viq7fJA04z"}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"243ba696-a82f-4dfe-b07e-f363a66fba61","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AwRbwtufjNSfOY27_MRPizbKtbPhAPAMHPFpJ2Rq2Mm4h9v1W9Viq7fJA04z\"}"}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"243ba696-a82f-4dfe-b07e-f363a66fba61","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"993d5a62-d181-489c-87ee-ecde694e3910","keyName":"e2e-sub-iso-74bf2d","subscription":"e2e-a-only-c369a6","tenant":"e2e-shared-a-0e8a6d","userId":"993d5a62-d181-489c-87ee-ecde694e3910","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"243ba696-a82f-4dfe-b07e-f363a66fba61","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"243ba696-a82f-4dfe-b07e-f363a66fba61","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"243ba696-a82f-4dfe-b07e-f363a66fba61","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"243ba696-a82f-4dfe-b07e-f363a66fba61","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/sub-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"243ba696-a82f-4dfe-b07e-f363a66fba61","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-c369a6"}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"243ba696-a82f-4dfe-b07e-f363a66fba61","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"243ba696-a82f-4dfe-b07e-f363a66fba61","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"243ba696-a82f-4dfe-b07e-f363a66fba61","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"243ba696-a82f-4dfe-b07e-f363a66fba61","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"243ba696-a82f-4dfe-b07e-f363a66fba61","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eea24b3b-6335-47b3-aeb4-546b167a38c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52270","PortSpecifier":{"PortValue":52270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eea24b3b-6335-47b3-aeb4-546b167a38c0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eea24b3b-6335-47b3-aeb4-546b167a38c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52270","PortSpecifier":{"PortValue":52270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131745,"nanos":385275855},"http":{"id":"eea24b3b-6335-47b3-aeb4-546b167a38c0","method":"GET","headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eea24b3b-6335-47b3-aeb4-546b167a38c0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YArbuj29hWScpQSP_QkzdF4THLjQHaldxFv4GZV1c0E2DmVB4Vbh5ZsqjNPb"}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eea24b3b-6335-47b3-aeb4-546b167a38c0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-bcb615.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YArbuj29hWScpQSP_QkzdF4THLjQHaldxFv4GZV1c0E2DmVB4Vbh5ZsqjNPb\"}"}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eea24b3b-6335-47b3-aeb4-546b167a38c0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bcb615.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0deb1c3b-0bf3-4cca-956f-cf00fedcc285","keyName":"e2e-sub-iso-171f2c","subscription":"e2e-b-only-c369a6","tenant":"e2e-shared-b-bcb615","userId":"0deb1c3b-0bf3-4cca-956f-cf00fedcc285","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eea24b3b-6335-47b3-aeb4-546b167a38c0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eea24b3b-6335-47b3-aeb4-546b167a38c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eea24b3b-6335-47b3-aeb4-546b167a38c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eea24b3b-6335-47b3-aeb4-546b167a38c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bcb615/sub-test-model-bcb615\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bcb615/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eea24b3b-6335-47b3-aeb4-546b167a38c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eea24b3b-6335-47b3-aeb4-546b167a38c0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eea24b3b-6335-47b3-aeb4-546b167a38c0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-c369a6"}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eea24b3b-6335-47b3-aeb4-546b167a38c0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eea24b3b-6335-47b3-aeb4-546b167a38c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:09:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eea24b3b-6335-47b3-aeb4-546b167a38c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b82952e7-b744-4695-8cd4-af1609f70a04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42668","PortSpecifier":{"PortValue":42668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b82952e7-b744-4695-8cd4-af1609f70a04","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b82952e7-b744-4695-8cd4-af1609f70a04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42668","PortSpecifier":{"PortValue":42668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131763,"nanos":857789691},"http":{"id":"b82952e7-b744-4695-8cd4-af1609f70a04","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b82952e7-b744-4695-8cd4-af1609f70a04","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b82952e7-b744-4695-8cd4-af1609f70a04","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b82952e7-b744-4695-8cd4-af1609f70a04","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b82952e7-b744-4695-8cd4-af1609f70a04","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b82952e7-b744-4695-8cd4-af1609f70a04","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b82952e7-b744-4695-8cd4-af1609f70a04","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/sub-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b82952e7-b744-4695-8cd4-af1609f70a04","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b82952e7-b744-4695-8cd4-af1609f70a04","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b82952e7-b744-4695-8cd4-af1609f70a04","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b82952e7-b744-4695-8cd4-af1609f70a04","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b82952e7-b744-4695-8cd4-af1609f70a04","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79114416-62b3-4a40-8fad-560c0763cc87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48874","PortSpecifier":{"PortValue":48874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79114416-62b3-4a40-8fad-560c0763cc87","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79114416-62b3-4a40-8fad-560c0763cc87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48874","PortSpecifier":{"PortValue":48874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131763,"nanos":898345206},"http":{"id":"79114416-62b3-4a40-8fad-560c0763cc87","method":"POST","headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"79114416-62b3-4a40-8fad-560c0763cc87","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79114416-62b3-4a40-8fad-560c0763cc87","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79114416-62b3-4a40-8fad-560c0763cc87","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79114416-62b3-4a40-8fad-560c0763cc87","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79114416-62b3-4a40-8fad-560c0763cc87","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79114416-62b3-4a40-8fad-560c0763cc87","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bcb615/sub-test-model-bcb615\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bcb615/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"79114416-62b3-4a40-8fad-560c0763cc87","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79114416-62b3-4a40-8fad-560c0763cc87","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79114416-62b3-4a40-8fad-560c0763cc87","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79114416-62b3-4a40-8fad-560c0763cc87","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79114416-62b3-4a40-8fad-560c0763cc87","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e778c45-31ec-4223-93bf-09e3a162acfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42682","PortSpecifier":{"PortValue":42682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e778c45-31ec-4223-93bf-09e3a162acfb","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e778c45-31ec-4223-93bf-09e3a162acfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42682","PortSpecifier":{"PortValue":42682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131763,"nanos":930433659},"http":{"id":"1e778c45-31ec-4223-93bf-09e3a162acfb","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e778c45-31ec-4223-93bf-09e3a162acfb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sqOftdLER0znqDo4_t5p1CBb9XhtxbMKCcMeCeDqCZtKln9wrg374KegammH"}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1e778c45-31ec-4223-93bf-09e3a162acfb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sqOftdLER0znqDo4_t5p1CBb9XhtxbMKCcMeCeDqCZtKln9wrg374KegammH\"}"}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1e778c45-31ec-4223-93bf-09e3a162acfb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"99f03d37-dfc1-4685-9edb-bbaa8aeec3d9","keyName":"e2e-sub-iso-3189d5","subscription":"e2e-shared-sub-fa0358","tenant":"e2e-shared-a-0e8a6d","userId":"99f03d37-dfc1-4685-9edb-bbaa8aeec3d9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e778c45-31ec-4223-93bf-09e3a162acfb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e778c45-31ec-4223-93bf-09e3a162acfb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e778c45-31ec-4223-93bf-09e3a162acfb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e778c45-31ec-4223-93bf-09e3a162acfb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/sub-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e778c45-31ec-4223-93bf-09e3a162acfb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e778c45-31ec-4223-93bf-09e3a162acfb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e778c45-31ec-4223-93bf-09e3a162acfb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-fa0358"}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e778c45-31ec-4223-93bf-09e3a162acfb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e778c45-31ec-4223-93bf-09e3a162acfb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e778c45-31ec-4223-93bf-09e3a162acfb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ffbfac5-223d-4e79-b24f-98bd33f2cd00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48878","PortSpecifier":{"PortValue":48878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ffbfac5-223d-4e79-b24f-98bd33f2cd00","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ffbfac5-223d-4e79-b24f-98bd33f2cd00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48878","PortSpecifier":{"PortValue":48878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131763,"nanos":960879827},"http":{"id":"5ffbfac5-223d-4e79-b24f-98bd33f2cd00","method":"POST","headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ffbfac5-223d-4e79-b24f-98bd33f2cd00","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zkEMnz2n31pOaX29_yUHmDyhhKawfUC7xOkLQ9nN7898kmAyT19kJebkznF1"}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ffbfac5-223d-4e79-b24f-98bd33f2cd00","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-bcb615.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zkEMnz2n31pOaX29_yUHmDyhhKawfUC7xOkLQ9nN7898kmAyT19kJebkznF1\"}"}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ffbfac5-223d-4e79-b24f-98bd33f2cd00","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bcb615.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d2bb005f-85d7-49ce-b0bb-900b4ceb48b1","keyName":"e2e-sub-iso-ce580e","subscription":"e2e-shared-sub-fa0358","tenant":"e2e-shared-b-bcb615","userId":"d2bb005f-85d7-49ce-b0bb-900b4ceb48b1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ffbfac5-223d-4e79-b24f-98bd33f2cd00","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ffbfac5-223d-4e79-b24f-98bd33f2cd00","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ffbfac5-223d-4e79-b24f-98bd33f2cd00","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ffbfac5-223d-4e79-b24f-98bd33f2cd00","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bcb615/sub-test-model-bcb615\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bcb615/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ffbfac5-223d-4e79-b24f-98bd33f2cd00","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ffbfac5-223d-4e79-b24f-98bd33f2cd00","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ffbfac5-223d-4e79-b24f-98bd33f2cd00","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ffbfac5-223d-4e79-b24f-98bd33f2cd00","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-fa0358"}
{"level":"info","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ffbfac5-223d-4e79-b24f-98bd33f2cd00","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:09:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ffbfac5-223d-4e79-b24f-98bd33f2cd00","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57b05fe9bf63a7c37c9ac943cfc35536742bc3222f4ed9611226fb3890cc3b14"}
{"level":"info","ts":"2026-07-15T16:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f3eb7b4f42f3740cc2708d04f89c2789843a4a4ed5ac2b2722c082e414c7b09"}
{"level":"info","ts":"2026-07-15T16:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a16c6abd6d5d30d9d33e14b54e1722033da65bd2c90f2185972b2419c045ef5"}
{"level":"info","ts":"2026-07-15T16:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5531662ce0934a37bd3cc9f0147a0588afd56df6ca35923d6a02ae0a82653e6"}
{"level":"info","ts":"2026-07-15T16:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4ebea162e1d8b0a236f80b3e690b0c557d4943e1d0971c1e1c31ee4571cdcf6"}
{"level":"info","ts":"2026-07-15T16:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49da92d8c6bce1f2b18941749597f8b56870ad60c6204d019401414733fa2c84"}
{"level":"info","ts":"2026-07-15T16:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c5004af025e0efbb5ae406f9f185203b1528953cde186f859f6aff0dd301771"}
{"level":"info","ts":"2026-07-15T16:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f70d474b8dd123b1437b34f695a58462e3dd271c62acf060840d4e0678254a2"}
{"level":"info","ts":"2026-07-15T16:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/397020931ff5d1ec9cf7f4f79f228282bf226a06f3807aeb3964a9e3fa73069a"}
{"level":"info","ts":"2026-07-15T16:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b9552a59ada5e2e767f5f717144dbca40919210bf20fea6d8172a44ced63b11"}
{"level":"info","ts":"2026-07-15T16:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b10529e41ad6bddcb12c6a8e4bb44b5e4af438c990d9b29ca383d3f6b96603af"}
{"level":"info","ts":"2026-07-15T16:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7277ba283cb13e9956dca0b18ce6dbe430848a42879881fc9c8e1682ce2c9d92"}
{"level":"info","ts":"2026-07-15T16:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd59e3c3b7bca41895390f6ed6fb9ae7faa992851c5e090e0ac95aa4cdec21ad"}
{"level":"info","ts":"2026-07-15T16:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9b9d3e5ee8c083c61776cf1e946d5665af5f219f112653f59864a5460c40149"}
{"level":"info","ts":"2026-07-15T16:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fce116a571b1d96f3b1970f09c5cd8675afdb9c0f09b90583236b92ea51cb99a"}
{"level":"info","ts":"2026-07-15T16:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2b10630c15e5614b31ec58f5558df96aa6e8737376f4d5811802c129fe01fce"}
{"level":"debug","ts":"2026-07-15T16:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94"}
{"level":"info","ts":"2026-07-15T16:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94"}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94"}
{"level":"error","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55666192145717362f2d1552d8ca3fbca48a0cc26d10d611736166b1e6dcef6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55666192145717362f2d1552d8ca3fbca48a0cc26d10d611736166b1e6dcef6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55666192145717362f2d1552d8ca3fbca48a0cc26d10d611736166b1e6dcef6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55666192145717362f2d1552d8ca3fbca48a0cc26d10d611736166b1e6dcef6e"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55666192145717362f2d1552d8ca3fbca48a0cc26d10d611736166b1e6dcef6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55666192145717362f2d1552d8ca3fbca48a0cc26d10d611736166b1e6dcef6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55666192145717362f2d1552d8ca3fbca48a0cc26d10d611736166b1e6dcef6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55666192145717362f2d1552d8ca3fbca48a0cc26d10d611736166b1e6dcef6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55666192145717362f2d1552d8ca3fbca48a0cc26d10d611736166b1e6dcef6e"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8"}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea"}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041"}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"}
{"level":"error","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1"}
{"level":"debug","ts":"2026-07-15T16:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6"}
{"level":"info","ts":"2026-07-15T16:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6"}
{"level":"debug","ts":"2026-07-15T16:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041"}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2f8516558d95848e12715578af79564f67e71c04615fe0d029ad9153ebc4eb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2f8516558d95848e12715578af79564f67e71c04615fe0d029ad9153ebc4eb5"}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"}
{"level":"error","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8"}
{"level":"error","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ab135e72257e2f028d43236dd400eb6de3bed349a9d986bda9a2b3746fded79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94"}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8"}
{"level":"info","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"}
{"level":"debug","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55666192145717362f2d1552d8ca3fbca48a0cc26d10d611736166b1e6dcef6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"}
{"level":"debug","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ab135e72257e2f028d43236dd400eb6de3bed349a9d986bda9a2b3746fded79"}
{"level":"debug","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494"}
{"level":"debug","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf"}
{"level":"info","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55666192145717362f2d1552d8ca3fbca48a0cc26d10d611736166b1e6dcef6e"}
{"level":"info","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107"}
{"level":"info","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f"}
{"level":"info","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55"}
{"level":"info","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44832","PortSpecifier":{"PortValue":44832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44832","PortSpecifier":{"PortValue":44832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131841,"nanos":758286113},"http":{"id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48250","PortSpecifier":{"PortValue":48250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60a280a9-0138-4cc9-9c11-36b560ee4436","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48250","PortSpecifier":{"PortValue":48250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131841,"nanos":800644957},"http":{"id":"60a280a9-0138-4cc9-9c11-36b560ee4436","method":"POST","headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bcb615/rate-test-model-bcb615\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bcb615/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44848","PortSpecifier":{"PortValue":44848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86965ef8-d27f-42b1-940f-b9a695291c12","method":"POST","path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44848","PortSpecifier":{"PortValue":44848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131841,"nanos":843144147},"http":{"id":"86965ef8-d27f-42b1-940f-b9a695291c12","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PttDmeX6e7v7kKN8_CBgRZAEs1KyevqxpUzV9w1hLCxQ8156g9ZWg1GhGmvW"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PttDmeX6e7v7kKN8_CBgRZAEs1KyevqxpUzV9w1hLCxQ8156g9ZWg1GhGmvW\"}"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2a168d46-a4af-440c-884f-0bedc98be28b","keyName":"e2e-rate-a-412036","subscription":"e2e-rate-iso-a-412036","tenant":"e2e-shared-a-0e8a6d","userId":"2a168d46-a4af-440c-884f-0bedc98be28b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\",\"requestedSubscription\":\"e2e-rate-iso-a-412036\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-412036","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-412036"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2a168d46-a4af-440c-884f-0bedc98be28b","keyName":"e2e-rate-a-412036","selected_subscription":"e2e-rate-iso-a-412036","selected_subscription_key":"ai-tenant-e2e-shared-a-0e8a6d/e2e-rate-iso-a-412036@ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-412036","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58900","PortSpecifier":{"PortValue":58900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","method":"POST","path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58900","PortSpecifier":{"PortValue":58900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131842,"nanos":905189608},"http":{"id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PttDmeX6e7v7kKN8_CBgRZAEs1KyevqxpUzV9w1hLCxQ8156g9ZWg1GhGmvW"}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PttDmeX6e7v7kKN8_CBgRZAEs1KyevqxpUzV9w1hLCxQ8156g9ZWg1GhGmvW\"}"}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2a168d46-a4af-440c-884f-0bedc98be28b","keyName":"e2e-rate-a-412036","subscription":"e2e-rate-iso-a-412036","tenant":"e2e-shared-a-0e8a6d","userId":"2a168d46-a4af-440c-884f-0bedc98be28b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\",\"requestedSubscription\":\"e2e-rate-iso-a-412036\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-412036","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-412036"}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2a168d46-a4af-440c-884f-0bedc98be28b","keyName":"e2e-rate-a-412036","selected_subscription":"e2e-rate-iso-a-412036","selected_subscription_key":"ai-tenant-e2e-shared-a-0e8a6d/e2e-rate-iso-a-412036@ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-412036","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58916","PortSpecifier":{"PortValue":58916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c99d1e9b-ed69-483b-a945-d0c847d769da","method":"POST","path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58916","PortSpecifier":{"PortValue":58916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131843,"nanos":944266470},"http":{"id":"c99d1e9b-ed69-483b-a945-d0c847d769da","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PttDmeX6e7v7kKN8_CBgRZAEs1KyevqxpUzV9w1hLCxQ8156g9ZWg1GhGmvW"}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PttDmeX6e7v7kKN8_CBgRZAEs1KyevqxpUzV9w1hLCxQ8156g9ZWg1GhGmvW\"}"}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2a168d46-a4af-440c-884f-0bedc98be28b","keyName":"e2e-rate-a-412036","subscription":"e2e-rate-iso-a-412036","tenant":"e2e-shared-a-0e8a6d","userId":"2a168d46-a4af-440c-884f-0bedc98be28b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\",\"requestedSubscription\":\"e2e-rate-iso-a-412036\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-412036","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-412036"}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2a168d46-a4af-440c-884f-0bedc98be28b","keyName":"e2e-rate-a-412036","selected_subscription":"e2e-rate-iso-a-412036","selected_subscription_key":"ai-tenant-e2e-shared-a-0e8a6d/e2e-rate-iso-a-412036@ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-412036","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39270","PortSpecifier":{"PortValue":39270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"719e9121-1410-4ea2-95b8-0dd015666a5c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39270","PortSpecifier":{"PortValue":39270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131856,"nanos":883264334},"http":{"id":"719e9121-1410-4ea2-95b8-0dd015666a5c","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8630b9d0-a856-45ef-8be7-26702a124932","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57976","PortSpecifier":{"PortValue":57976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8630b9d0-a856-45ef-8be7-26702a124932","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8630b9d0-a856-45ef-8be7-26702a124932","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57976","PortSpecifier":{"PortValue":57976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131856,"nanos":923677468},"http":{"id":"8630b9d0-a856-45ef-8be7-26702a124932","method":"POST","headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8630b9d0-a856-45ef-8be7-26702a124932","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8630b9d0-a856-45ef-8be7-26702a124932","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8630b9d0-a856-45ef-8be7-26702a124932","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8630b9d0-a856-45ef-8be7-26702a124932","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8630b9d0-a856-45ef-8be7-26702a124932","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8630b9d0-a856-45ef-8be7-26702a124932","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bcb615/rate-test-model-bcb615\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bcb615/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8630b9d0-a856-45ef-8be7-26702a124932","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8630b9d0-a856-45ef-8be7-26702a124932","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8630b9d0-a856-45ef-8be7-26702a124932","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8630b9d0-a856-45ef-8be7-26702a124932","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8630b9d0-a856-45ef-8be7-26702a124932","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39280","PortSpecifier":{"PortValue":39280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"816468d6-c016-4b14-942c-2512f16c9ea3","method":"POST","path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39280","PortSpecifier":{"PortValue":39280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131856,"nanos":959610684},"http":{"id":"816468d6-c016-4b14-942c-2512f16c9ea3","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iRZ9cBA3cfww5nqV_Sj047wayfLHJ8CObID9vOhmOYpM7ylSnkP7K5am8qb5"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-iRZ9cBA3cfww5nqV_Sj047wayfLHJ8CObID9vOhmOYpM7ylSnkP7K5am8qb5\"}"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e22d3e7-ff66-46b1-a46a-5f544b5b5bbd","keyName":"e2e-rate-a-c4865b","subscription":"e2e-rate-iso-a-c4865b","tenant":"e2e-shared-a-0e8a6d","userId":"3e22d3e7-ff66-46b1-a46a-5f544b5b5bbd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\",\"requestedSubscription\":\"e2e-rate-iso-a-c4865b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4865b","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c4865b"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e22d3e7-ff66-46b1-a46a-5f544b5b5bbd","keyName":"e2e-rate-a-c4865b","selected_subscription":"e2e-rate-iso-a-c4865b","selected_subscription_key":"ai-tenant-e2e-shared-a-0e8a6d/e2e-rate-iso-a-c4865b@ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4865b","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:10:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39284","PortSpecifier":{"PortValue":39284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","method":"POST","path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39284","PortSpecifier":{"PortValue":39284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131857,"nanos":998301907},"http":{"id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iRZ9cBA3cfww5nqV_Sj047wayfLHJ8CObID9vOhmOYpM7ylSnkP7K5am8qb5"}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-iRZ9cBA3cfww5nqV_Sj047wayfLHJ8CObID9vOhmOYpM7ylSnkP7K5am8qb5\"}"}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e22d3e7-ff66-46b1-a46a-5f544b5b5bbd","keyName":"e2e-rate-a-c4865b","subscription":"e2e-rate-iso-a-c4865b","tenant":"e2e-shared-a-0e8a6d","userId":"3e22d3e7-ff66-46b1-a46a-5f544b5b5bbd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\",\"requestedSubscription\":\"e2e-rate-iso-a-c4865b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4865b","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c4865b"}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e22d3e7-ff66-46b1-a46a-5f544b5b5bbd","keyName":"e2e-rate-a-c4865b","selected_subscription":"e2e-rate-iso-a-c4865b","selected_subscription_key":"ai-tenant-e2e-shared-a-0e8a6d/e2e-rate-iso-a-c4865b@ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4865b","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57f884b6-6275-487c-a57f-23406ef311e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39288","PortSpecifier":{"PortValue":39288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57f884b6-6275-487c-a57f-23406ef311e6","method":"POST","path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57f884b6-6275-487c-a57f-23406ef311e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39288","PortSpecifier":{"PortValue":39288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131859,"nanos":38001983},"http":{"id":"57f884b6-6275-487c-a57f-23406ef311e6","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iRZ9cBA3cfww5nqV_Sj047wayfLHJ8CObID9vOhmOYpM7ylSnkP7K5am8qb5"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-iRZ9cBA3cfww5nqV_Sj047wayfLHJ8CObID9vOhmOYpM7ylSnkP7K5am8qb5\"}"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e22d3e7-ff66-46b1-a46a-5f544b5b5bbd","keyName":"e2e-rate-a-c4865b","subscription":"e2e-rate-iso-a-c4865b","tenant":"e2e-shared-a-0e8a6d","userId":"3e22d3e7-ff66-46b1-a46a-5f544b5b5bbd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\",\"requestedSubscription\":\"e2e-rate-iso-a-c4865b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4865b","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57f884b6-6275-487c-a57f-23406ef311e6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c4865b"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e22d3e7-ff66-46b1-a46a-5f544b5b5bbd","keyName":"e2e-rate-a-c4865b","selected_subscription":"e2e-rate-iso-a-c4865b","selected_subscription_key":"ai-tenant-e2e-shared-a-0e8a6d/e2e-rate-iso-a-c4865b@ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4865b","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57f884b6-6275-487c-a57f-23406ef311e6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57f884b6-6275-487c-a57f-23406ef311e6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57984","PortSpecifier":{"PortValue":57984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","method":"POST","path":"/ai-tenant-e2e-shared-b-bcb615/rate-test-model-bcb615/v1/completions","host":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57984","PortSpecifier":{"PortValue":57984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131859,"nanos":69273495},"http":{"id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","method":"POST","headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-bcb615/rate-test-model-bcb615/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-100ZnGaMMT3TSakbr_Y0QSSOQCSj7c7ryKs8IqQhx6xOdeMdUwJ5QSpRDX9Pu"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-bcb615.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-100ZnGaMMT3TSakbr_Y0QSSOQCSj7c7ryKs8IqQhx6xOdeMdUwJ5QSpRDX9Pu\"}"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bcb615.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7ad50c08-06ef-472f-90a4-6b0cee15fa3b","keyName":"e2e-rate-b-c4865b","subscription":"e2e-rate-iso-b-c4865b","tenant":"e2e-shared-b-bcb615","userId":"7ad50c08-06ef-472f-90a4-6b0cee15fa3b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-bcb615.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-bcb615/rate-test-model-bcb615\",\"requestedSubscription\":\"e2e-rate-iso-b-c4865b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bcb615.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bcb615","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c4865b","namespace":"ai-tenant-e2e-shared-b-bcb615","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bcb615/rate-test-model-bcb615\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bcb615/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-c4865b"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7ad50c08-06ef-472f-90a4-6b0cee15fa3b","keyName":"e2e-rate-b-c4865b","selected_subscription":"e2e-rate-iso-b-c4865b","selected_subscription_key":"ai-tenant-e2e-shared-b-bcb615/e2e-rate-iso-b-c4865b@ai-tenant-e2e-shared-b-bcb615/rate-test-model-bcb615","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bcb615","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c4865b","namespace":"ai-tenant-e2e-shared-b-bcb615","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55666192145717362f2d1552d8ca3fbca48a0cc26d10d611736166b1e6dcef6e"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8"}
{"level":"info","ts":"2026-07-15T16:11:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2f8516558d95848e12715578af79564f67e71c04615fe0d029ad9153ebc4eb5"}
{"level":"info","ts":"2026-07-15T16:11:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf"}
{"level":"info","ts":"2026-07-15T16:11:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"}
{"level":"info","ts":"2026-07-15T16:11:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ab135e72257e2f028d43236dd400eb6de3bed349a9d986bda9a2b3746fded79"}
{"level":"info","ts":"2026-07-15T16:11:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"}
{"level":"info","ts":"2026-07-15T16:12:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"}
{"level":"info","ts":"2026-07-15T16:12:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494"}
{"level":"info","ts":"2026-07-15T16:12:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6"}