--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-07T16:51:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"026a0e83-a07f-42b2-9b42-a277557552ba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17aWiaPJMnJB3qnJP_dj1gxAzVaAUuJcw0DzmuUDeTEcRz1hJ4lSn29LJYvs8"}
{"level":"debug","ts":"2026-07-07T16:51:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"026a0e83-a07f-42b2-9b42-a277557552ba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-592405.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17aWiaPJMnJB3qnJP_dj1gxAzVaAUuJcw0DzmuUDeTEcRz1hJ4lSn29LJYvs8\"}"}
{"level":"debug","ts":"2026-07-07T16:51:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"026a0e83-a07f-42b2-9b42-a277557552ba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-592405.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"eaed6e44-4e81-4d1f-b36f-e54cb9e28b82","keyName":"e2e-tenant-inference-592405","subscription":"test-model-592405-sub","tenant":"e2e-inf-a-592405","userId":"eaed6e44-4e81-4d1f-b36f-e54cb9e28b82","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:51:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"026a0e83-a07f-42b2-9b42-a277557552ba","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-592405.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-592405/test-model-592405\",\"requestedSubscription\":\"test-model-592405-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:51:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"026a0e83-a07f-42b2-9b42-a277557552ba","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-592405.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-592405","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-592405-sub","namespace":"ai-tenant-e2e-inf-a-592405","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:51:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"026a0e83-a07f-42b2-9b42-a277557552ba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:51:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"026a0e83-a07f-42b2-9b42-a277557552ba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:51:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"026a0e83-a07f-42b2-9b42-a277557552ba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:51:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"026a0e83-a07f-42b2-9b42-a277557552ba","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:51:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"026a0e83-a07f-42b2-9b42-a277557552ba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-592405/test-model-592405\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:51:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"026a0e83-a07f-42b2-9b42-a277557552ba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:51:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"026a0e83-a07f-42b2-9b42-a277557552ba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:51:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"026a0e83-a07f-42b2-9b42-a277557552ba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-592405-sub"}
{"level":"debug","ts":"2026-07-07T16:51:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"026a0e83-a07f-42b2-9b42-a277557552ba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"eaed6e44-4e81-4d1f-b36f-e54cb9e28b82","keyName":"e2e-tenant-inference-592405","selected_subscription":"test-model-592405-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-592405/test-model-592405-sub@ai-tenant-e2e-inf-a-592405/test-model-592405","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-592405","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-592405-sub","namespace":"ai-tenant-e2e-inf-a-592405","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:51:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"026a0e83-a07f-42b2-9b42-a277557552ba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:51:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"026a0e83-a07f-42b2-9b42-a277557552ba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f0670dc-0e87-4e6c-bc30-6aee09ae4dc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:36746","PortSpecifier":{"PortValue":36746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f0670dc-0e87-4e6c-bc30-6aee09ae4dc7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-592405.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f0670dc-0e87-4e6c-bc30-6aee09ae4dc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:36746","PortSpecifier":{"PortValue":36746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443075,"nanos":80292441},"http":{"id":"7f0670dc-0e87-4e6c-bc30-6aee09ae4dc7","method":"POST","headers":{":authority":"e2e-inf-a-592405.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7f0670dc-0e87-4e6c-bc30-6aee09ae4dc7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f0670dc-0e87-4e6c-bc30-6aee09ae4dc7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f0670dc-0e87-4e6c-bc30-6aee09ae4dc7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"578a130509eeb60341b546dd083f6069faff03f10feb708b31de0a1656615085"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-592405.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f0670dc-0e87-4e6c-bc30-6aee09ae4dc7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f0670dc-0e87-4e6c-bc30-6aee09ae4dc7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f0670dc-0e87-4e6c-bc30-6aee09ae4dc7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-592405/test-model-592405\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7f0670dc-0e87-4e6c-bc30-6aee09ae4dc7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f0670dc-0e87-4e6c-bc30-6aee09ae4dc7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f0670dc-0e87-4e6c-bc30-6aee09ae4dc7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f0670dc-0e87-4e6c-bc30-6aee09ae4dc7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f0670dc-0e87-4e6c-bc30-6aee09ae4dc7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c147359d-04cb-46a8-a328-9b3e42dc66fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59754","PortSpecifier":{"PortValue":59754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c147359d-04cb-46a8-a328-9b3e42dc66fd","method":"POST","path":"/ai-tenant-e2e-inf-b-cfae17/test-model-cfae17/v1/chat/completions","host":"e2e-inf-b-cfae17.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c147359d-04cb-46a8-a328-9b3e42dc66fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59754","PortSpecifier":{"PortValue":59754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443075,"nanos":121702971},"http":{"id":"c147359d-04cb-46a8-a328-9b3e42dc66fd","method":"POST","headers":{":authority":"e2e-inf-b-cfae17.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-cfae17/test-model-cfae17/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c147359d-04cb-46a8-a328-9b3e42dc66fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-oSdJZz6Omz0fjf6R_I7ru24CcTUDgFwO4ixVaQ5CElH3AebCP4a0e4Rzv2Ee"}
{"level":"debug","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c147359d-04cb-46a8-a328-9b3e42dc66fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-cfae17.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-oSdJZz6Omz0fjf6R_I7ru24CcTUDgFwO4ixVaQ5CElH3AebCP4a0e4Rzv2Ee\"}"}
{"level":"debug","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c147359d-04cb-46a8-a328-9b3e42dc66fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-cfae17.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"c147359d-04cb-46a8-a328-9b3e42dc66fd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-cfae17.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c147359d-04cb-46a8-a328-9b3e42dc66fd","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"1af6b75614a8936d00fff5cbab167680f1904498c17749fca85cf13e68a2781b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-cfae17.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-cfae17/test-model-cfae17/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"c147359d-04cb-46a8-a328-9b3e42dc66fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c147359d-04cb-46a8-a328-9b3e42dc66fd","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T16:51:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c147359d-04cb-46a8-a328-9b3e42dc66fd","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T16:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11708d9636bcff0af9a4bc33b1f08b29a4fe715eae3f1a04ce496c0bddbf685a"}
{"level":"info","ts":"2026-07-07T16:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26329ea3e2e62aed8b76dec63d22f2e5af1630c179ccfe725f80070e5f762d66"}
{"level":"info","ts":"2026-07-07T16:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1af6b75614a8936d00fff5cbab167680f1904498c17749fca85cf13e68a2781b"}
{"level":"info","ts":"2026-07-07T16:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/578a130509eeb60341b546dd083f6069faff03f10feb708b31de0a1656615085"}
{"level":"info","ts":"2026-07-07T16:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b87cba6af37e302cb38b77fcac0937b800a314e54fbd554061f1ad45f3c27b3"}
{"level":"info","ts":"2026-07-07T16:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8a3c9d23af98498d0c678bd992534780461fef4954d3eb5fdb1caf4a2f7d7c8"}
{"level":"info","ts":"2026-07-07T16:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ab212d8e505afcfdcb52fd0a23ce96dd47d50d27738202a838442d02e6c99bb"}
{"level":"info","ts":"2026-07-07T16:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed48ca1f6c13e733714078ba51e714e57decc3710f7b86ad4e379b421c72feb6"}
{"level":"info","ts":"2026-07-07T16:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b3b0de643c57d65a6cdb2d3697f72387517a3004975ee888a7da84830545da5"}
{"level":"info","ts":"2026-07-07T16:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a47a1df81a02e90319367d0e776774aa39a6bfa8bf0478f38e83e7502deafad"}
{"level":"info","ts":"2026-07-07T16:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bf7997de675a6d97163351805ac5604290de7ede484483054a97945dcb19aef"}
{"level":"info","ts":"2026-07-07T16:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6683de323d9036e3b42c5ad2147acff8c4264b2e04ba3c2000f4d6f7590099ec"}
{"level":"info","ts":"2026-07-07T16:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/633cc640efb9fa24b1dfa3a78bffd79b7ecc2b8f2995e05fbe20f72cd677ee8b"}
{"level":"info","ts":"2026-07-07T16:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/130dcc75549cb4771466d09c7462fb8a138d56b793f1a05047c733c061c4b322"}
{"level":"info","ts":"2026-07-07T16:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3187ecfcdb7b285db651865ae1ba3844b6c23371a72f6914497588d9ae09c00"}
{"level":"info","ts":"2026-07-07T16:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a74ebe01b2596d68450c706ad8179f5aba148b3ed1ff82e9660d311b8f524528"}
{"level":"info","ts":"2026-07-07T16:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ff21ce01e9767010513b6d749e3404c8556fc96e76a0e63f26c4082474121e3"}
{"level":"info","ts":"2026-07-07T16:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0868ae433a349ac1bce43a4251cd4416dcb4617ffd5c9908cc5bf3eea278af71"}
{"level":"info","ts":"2026-07-07T16:52:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba1c94db0a0987fda5e815f87b45bde86c57394e91080a7a0ac3ddddd55f7fa3"}
{"level":"info","ts":"2026-07-07T16:52:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fee454c15550d20292023ffed7ac379a429606c2ad6b094114f6cf0f20edafe"}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0"}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0"}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0"}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0"}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0"}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"}
{"level":"debug","ts":"2026-07-07T16:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:52:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:52:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:52:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"}
{"level":"debug","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"}
{"level":"debug","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:52:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:52:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:52:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:52:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"}
{"level":"debug","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"}
{"level":"debug","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:52:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:52:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:52:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:52:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"}
{"level":"debug","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"}
{"level":"debug","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:52:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:52:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"}
{"level":"debug","ts":"2026-07-07T16:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f2f540cd6a72ceca5f041fbf722f0f9d8cf59fb352ed481761b9c06fb94d60a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:52:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:52:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f2f540cd6a72ceca5f041fbf722f0f9d8cf59fb352ed481761b9c06fb94d60a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f2f540cd6a72ceca5f041fbf722f0f9d8cf59fb352ed481761b9c06fb94d60a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:52:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:52:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f2f540cd6a72ceca5f041fbf722f0f9d8cf59fb352ed481761b9c06fb94d60a"}
{"level":"info","ts":"2026-07-07T16:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f2f540cd6a72ceca5f041fbf722f0f9d8cf59fb352ed481761b9c06fb94d60a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f2f540cd6a72ceca5f041fbf722f0f9d8cf59fb352ed481761b9c06fb94d60a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:52:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:52:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f2f540cd6a72ceca5f041fbf722f0f9d8cf59fb352ed481761b9c06fb94d60a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f2f540cd6a72ceca5f041fbf722f0f9d8cf59fb352ed481761b9c06fb94d60a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f2f540cd6a72ceca5f041fbf722f0f9d8cf59fb352ed481761b9c06fb94d60a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f2f540cd6a72ceca5f041fbf722f0f9d8cf59fb352ed481761b9c06fb94d60a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f2f540cd6a72ceca5f041fbf722f0f9d8cf59fb352ed481761b9c06fb94d60a"}
{"level":"info","ts":"2026-07-07T16:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f2f540cd6a72ceca5f041fbf722f0f9d8cf59fb352ed481761b9c06fb94d60a"}
{"level":"debug","ts":"2026-07-07T16:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f2f540cd6a72ceca5f041fbf722f0f9d8cf59fb352ed481761b9c06fb94d60a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:52:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:52:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f2f540cd6a72ceca5f041fbf722f0f9d8cf59fb352ed481761b9c06fb94d60a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f2f540cd6a72ceca5f041fbf722f0f9d8cf59fb352ed481761b9c06fb94d60a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f2f540cd6a72ceca5f041fbf722f0f9d8cf59fb352ed481761b9c06fb94d60a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f2f540cd6a72ceca5f041fbf722f0f9d8cf59fb352ed481761b9c06fb94d60a"}
{"level":"debug","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:52:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:52:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94"}
{"level":"info","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:52:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94"}
{"level":"info","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94"}
{"level":"debug","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:52:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:52:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:52:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94"}
{"level":"debug","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94"}
{"level":"debug","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:52:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:52:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94"}
{"level":"info","ts":"2026-07-07T16:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/607974b8f29b67817b2757bad5f5d95a994ba4b24a00e70e5ed9d229865eefa0"}
{"level":"info","ts":"2026-07-07T16:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a04c0c517501909c867293e5558536299fa66496732df23d57a7e8492697250f"}
{"level":"info","ts":"2026-07-07T16:52:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f2f540cd6a72ceca5f041fbf722f0f9d8cf59fb352ed481761b9c06fb94d60a"}
{"level":"info","ts":"2026-07-07T16:52:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/252eeffb71c6552a687e77c8770316b64f80dbe770303abc9db97e3ba737cc94"}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049"}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049"}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049"}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049"}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049"}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049"}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049"}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049"}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049"}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319"}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319"}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319"}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12a1af933a1de0410a841899cb9f150bb59a17d52489646be4521e7635836b27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12a1af933a1de0410a841899cb9f150bb59a17d52489646be4521e7635836b27"}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12a1af933a1de0410a841899cb9f150bb59a17d52489646be4521e7635836b27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12a1af933a1de0410a841899cb9f150bb59a17d52489646be4521e7635836b27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12a1af933a1de0410a841899cb9f150bb59a17d52489646be4521e7635836b27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12a1af933a1de0410a841899cb9f150bb59a17d52489646be4521e7635836b27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12a1af933a1de0410a841899cb9f150bb59a17d52489646be4521e7635836b27"}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12a1af933a1de0410a841899cb9f150bb59a17d52489646be4521e7635836b27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12a1af933a1de0410a841899cb9f150bb59a17d52489646be4521e7635836b27"}
{"level":"error","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"}
{"level":"error","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea73e856a2bee208b696232eb8b2baaa992d16577ebf59cc34f87bf94c5cb3a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea73e856a2bee208b696232eb8b2baaa992d16577ebf59cc34f87bf94c5cb3a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea73e856a2bee208b696232eb8b2baaa992d16577ebf59cc34f87bf94c5cb3a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea73e856a2bee208b696232eb8b2baaa992d16577ebf59cc34f87bf94c5cb3a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea73e856a2bee208b696232eb8b2baaa992d16577ebf59cc34f87bf94c5cb3a0"}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea73e856a2bee208b696232eb8b2baaa992d16577ebf59cc34f87bf94c5cb3a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea73e856a2bee208b696232eb8b2baaa992d16577ebf59cc34f87bf94c5cb3a0"}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea73e856a2bee208b696232eb8b2baaa992d16577ebf59cc34f87bf94c5cb3a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea73e856a2bee208b696232eb8b2baaa992d16577ebf59cc34f87bf94c5cb3a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea73e856a2bee208b696232eb8b2baaa992d16577ebf59cc34f87bf94c5cb3a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea73e856a2bee208b696232eb8b2baaa992d16577ebf59cc34f87bf94c5cb3a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c0450707b189aae878a7ce297a7b02648c705aa9603009cf9606eb6b4421f2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c0450707b189aae878a7ce297a7b02648c705aa9603009cf9606eb6b4421f2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1d460ed5afe3d6035460cdd19ee2daf655e683e28581ccbe164fca3e65e9b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1"}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1d460ed5afe3d6035460cdd19ee2daf655e683e28581ccbe164fca3e65e9b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c0450707b189aae878a7ce297a7b02648c705aa9603009cf9606eb6b4421f2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"568d21d0460da8c62ed4bc679c732453ee547d689286e1d95dee1512bbfacff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea73e856a2bee208b696232eb8b2baaa992d16577ebf59cc34f87bf94c5cb3a0"}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"568d21d0460da8c62ed4bc679c732453ee547d689286e1d95dee1512bbfacff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c0450707b189aae878a7ce297a7b02648c705aa9603009cf9606eb6b4421f2a"}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1d460ed5afe3d6035460cdd19ee2daf655e683e28581ccbe164fca3e65e9b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1d460ed5afe3d6035460cdd19ee2daf655e683e28581ccbe164fca3e65e9b5e"}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1d460ed5afe3d6035460cdd19ee2daf655e683e28581ccbe164fca3e65e9b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c0450707b189aae878a7ce297a7b02648c705aa9603009cf9606eb6b4421f2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c0450707b189aae878a7ce297a7b02648c705aa9603009cf9606eb6b4421f2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c0450707b189aae878a7ce297a7b02648c705aa9603009cf9606eb6b4421f2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"568d21d0460da8c62ed4bc679c732453ee547d689286e1d95dee1512bbfacff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1"}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5004ef945515ccc31671d7e0ffd4b541d35f69e6101c5e58cad8f4c97855d0aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/568d21d0460da8c62ed4bc679c732453ee547d689286e1d95dee1512bbfacff5"}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5004ef945515ccc31671d7e0ffd4b541d35f69e6101c5e58cad8f4c97855d0aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1d460ed5afe3d6035460cdd19ee2daf655e683e28581ccbe164fca3e65e9b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1d460ed5afe3d6035460cdd19ee2daf655e683e28581ccbe164fca3e65e9b5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5004ef945515ccc31671d7e0ffd4b541d35f69e6101c5e58cad8f4c97855d0aa"}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1d460ed5afe3d6035460cdd19ee2daf655e683e28581ccbe164fca3e65e9b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c0450707b189aae878a7ce297a7b02648c705aa9603009cf9606eb6b4421f2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"568d21d0460da8c62ed4bc679c732453ee547d689286e1d95dee1512bbfacff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["568d21d0460da8c62ed4bc679c732453ee547d689286e1d95dee1512bbfacff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"568d21d0460da8c62ed4bc679c732453ee547d689286e1d95dee1512bbfacff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1d460ed5afe3d6035460cdd19ee2daf655e683e28581ccbe164fca3e65e9b5e"}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5004ef945515ccc31671d7e0ffd4b541d35f69e6101c5e58cad8f4c97855d0aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5004ef945515ccc31671d7e0ffd4b541d35f69e6101c5e58cad8f4c97855d0aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c0450707b189aae878a7ce297a7b02648c705aa9603009cf9606eb6b4421f2a"}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5004ef945515ccc31671d7e0ffd4b541d35f69e6101c5e58cad8f4c97855d0aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1d460ed5afe3d6035460cdd19ee2daf655e683e28581ccbe164fca3e65e9b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"568d21d0460da8c62ed4bc679c732453ee547d689286e1d95dee1512bbfacff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1"}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5004ef945515ccc31671d7e0ffd4b541d35f69e6101c5e58cad8f4c97855d0aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5004ef945515ccc31671d7e0ffd4b541d35f69e6101c5e58cad8f4c97855d0aa"}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5004ef945515ccc31671d7e0ffd4b541d35f69e6101c5e58cad8f4c97855d0aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/568d21d0460da8c62ed4bc679c732453ee547d689286e1d95dee1512bbfacff5"}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5004ef945515ccc31671d7e0ffd4b541d35f69e6101c5e58cad8f4c97855d0aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5004ef945515ccc31671d7e0ffd4b541d35f69e6101c5e58cad8f4c97855d0aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1d460ed5afe3d6035460cdd19ee2daf655e683e28581ccbe164fca3e65e9b5e"}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5004ef945515ccc31671d7e0ffd4b541d35f69e6101c5e58cad8f4c97855d0aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5004ef945515ccc31671d7e0ffd4b541d35f69e6101c5e58cad8f4c97855d0aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1"}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5004ef945515ccc31671d7e0ffd4b541d35f69e6101c5e58cad8f4c97855d0aa"}
{"level":"info","ts":"2026-07-07T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1"}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb"}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb"}
{"level":"error","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb"}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6535d0372a82f56c66d12fb6dad7196850af07e2ea38797817b9cec461398c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6535d0372a82f56c66d12fb6dad7196850af07e2ea38797817b9cec461398c39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6535d0372a82f56c66d12fb6dad7196850af07e2ea38797817b9cec461398c39","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6535d0372a82f56c66d12fb6dad7196850af07e2ea38797817b9cec461398c39"}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6535d0372a82f56c66d12fb6dad7196850af07e2ea38797817b9cec461398c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6535d0372a82f56c66d12fb6dad7196850af07e2ea38797817b9cec461398c39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6535d0372a82f56c66d12fb6dad7196850af07e2ea38797817b9cec461398c39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6535d0372a82f56c66d12fb6dad7196850af07e2ea38797817b9cec461398c39"}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6535d0372a82f56c66d12fb6dad7196850af07e2ea38797817b9cec461398c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6535d0372a82f56c66d12fb6dad7196850af07e2ea38797817b9cec461398c39"}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6535d0372a82f56c66d12fb6dad7196850af07e2ea38797817b9cec461398c39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6535d0372a82f56c66d12fb6dad7196850af07e2ea38797817b9cec461398c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6535d0372a82f56c66d12fb6dad7196850af07e2ea38797817b9cec461398c39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb"}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6535d0372a82f56c66d12fb6dad7196850af07e2ea38797817b9cec461398c39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6535d0372a82f56c66d12fb6dad7196850af07e2ea38797817b9cec461398c39"}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6535d0372a82f56c66d12fb6dad7196850af07e2ea38797817b9cec461398c39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c32077d9d8d3913408d86f0a05b48689165b9cbb3acbf968776dc9662b10f7b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c32077d9d8d3913408d86f0a05b48689165b9cbb3acbf968776dc9662b10f7b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb"}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a7c3c1040bc9fa70491aec421ca0d7b6c369925fd16f79210df3e063fbe8cea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c32077d9d8d3913408d86f0a05b48689165b9cbb3acbf968776dc9662b10f7b4"}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a7c3c1040bc9fa70491aec421ca0d7b6c369925fd16f79210df3e063fbe8cea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c32077d9d8d3913408d86f0a05b48689165b9cbb3acbf968776dc9662b10f7b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c32077d9d8d3913408d86f0a05b48689165b9cbb3acbf968776dc9662b10f7b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6535d0372a82f56c66d12fb6dad7196850af07e2ea38797817b9cec461398c39"}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c32077d9d8d3913408d86f0a05b48689165b9cbb3acbf968776dc9662b10f7b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a7c3c1040bc9fa70491aec421ca0d7b6c369925fd16f79210df3e063fbe8cea"}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a7c3c1040bc9fa70491aec421ca0d7b6c369925fd16f79210df3e063fbe8cea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a7c3c1040bc9fa70491aec421ca0d7b6c369925fd16f79210df3e063fbe8cea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a7c3c1040bc9fa70491aec421ca0d7b6c369925fd16f79210df3e063fbe8cea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c32077d9d8d3913408d86f0a05b48689165b9cbb3acbf968776dc9662b10f7b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb"}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b283ac82df4e65a85953844fb34af5ca48443e842ff2162d4cc72c5d0e86f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c32077d9d8d3913408d86f0a05b48689165b9cbb3acbf968776dc9662b10f7b4"}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b283ac82df4e65a85953844fb34af5ca48443e842ff2162d4cc72c5d0e86f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a7c3c1040bc9fa70491aec421ca0d7b6c369925fd16f79210df3e063fbe8cea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b283ac82df4e65a85953844fb34af5ca48443e842ff2162d4cc72c5d0e86f8"}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b283ac82df4e65a85953844fb34af5ca48443e842ff2162d4cc72c5d0e86f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b283ac82df4e65a85953844fb34af5ca48443e842ff2162d4cc72c5d0e86f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb"}
{"level":"info","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b283ac82df4e65a85953844fb34af5ca48443e842ff2162d4cc72c5d0e86f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b283ac82df4e65a85953844fb34af5ca48443e842ff2162d4cc72c5d0e86f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e286a791263853db02fdbc833ca0c826ae41b2704a28ff0dc0add41421f375d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a7c3c1040bc9fa70491aec421ca0d7b6c369925fd16f79210df3e063fbe8cea"}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e286a791263853db02fdbc833ca0c826ae41b2704a28ff0dc0add41421f375d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e286a791263853db02fdbc833ca0c826ae41b2704a28ff0dc0add41421f375d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e286a791263853db02fdbc833ca0c826ae41b2704a28ff0dc0add41421f375d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e286a791263853db02fdbc833ca0c826ae41b2704a28ff0dc0add41421f375d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b283ac82df4e65a85953844fb34af5ca48443e842ff2162d4cc72c5d0e86f8"}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb"}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e286a791263853db02fdbc833ca0c826ae41b2704a28ff0dc0add41421f375d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e286a791263853db02fdbc833ca0c826ae41b2704a28ff0dc0add41421f375d"}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e286a791263853db02fdbc833ca0c826ae41b2704a28ff0dc0add41421f375d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e286a791263853db02fdbc833ca0c826ae41b2704a28ff0dc0add41421f375d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e286a791263853db02fdbc833ca0c826ae41b2704a28ff0dc0add41421f375d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172"}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e286a791263853db02fdbc833ca0c826ae41b2704a28ff0dc0add41421f375d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e286a791263853db02fdbc833ca0c826ae41b2704a28ff0dc0add41421f375d"}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e286a791263853db02fdbc833ca0c826ae41b2704a28ff0dc0add41421f375d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172"}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e286a791263853db02fdbc833ca0c826ae41b2704a28ff0dc0add41421f375d"}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e286a791263853db02fdbc833ca0c826ae41b2704a28ff0dc0add41421f375d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172"}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172"}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172"}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9eb062904b9792d5c0a8b7986130950f91137ed049da23f782600c408290437"}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172"}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9eb062904b9792d5c0a8b7986130950f91137ed049da23f782600c408290437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9eb062904b9792d5c0a8b7986130950f91137ed049da23f782600c408290437"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9eb062904b9792d5c0a8b7986130950f91137ed049da23f782600c408290437","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9eb062904b9792d5c0a8b7986130950f91137ed049da23f782600c408290437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9eb062904b9792d5c0a8b7986130950f91137ed049da23f782600c408290437"}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9eb062904b9792d5c0a8b7986130950f91137ed049da23f782600c408290437","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9eb062904b9792d5c0a8b7986130950f91137ed049da23f782600c408290437"}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9eb062904b9792d5c0a8b7986130950f91137ed049da23f782600c408290437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9eb062904b9792d5c0a8b7986130950f91137ed049da23f782600c408290437"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9eb062904b9792d5c0a8b7986130950f91137ed049da23f782600c408290437","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9eb062904b9792d5c0a8b7986130950f91137ed049da23f782600c408290437"}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9eb062904b9792d5c0a8b7986130950f91137ed049da23f782600c408290437","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"}
{"level":"info","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e9db43c-9d75-49c9-b0e1-f44b5c0367b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48894","PortSpecifier":{"PortValue":48894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e9db43c-9d75-49c9-b0e1-f44b5c0367b1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e9db43c-9d75-49c9-b0e1-f44b5c0367b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48894","PortSpecifier":{"PortValue":48894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443257,"nanos":297095390},"http":{"id":"7e9db43c-9d75-49c9-b0e1-f44b5c0367b1","method":"POST","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7e9db43c-9d75-49c9-b0e1-f44b5c0367b1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e9db43c-9d75-49c9-b0e1-f44b5c0367b1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e9db43c-9d75-49c9-b0e1-f44b5c0367b1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e9db43c-9d75-49c9-b0e1-f44b5c0367b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e9db43c-9d75-49c9-b0e1-f44b5c0367b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e9db43c-9d75-49c9-b0e1-f44b5c0367b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/auth-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e9db43c-9d75-49c9-b0e1-f44b5c0367b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e9db43c-9d75-49c9-b0e1-f44b5c0367b1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e9db43c-9d75-49c9-b0e1-f44b5c0367b1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e9db43c-9d75-49c9-b0e1-f44b5c0367b1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e9db43c-9d75-49c9-b0e1-f44b5c0367b1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c23ba06-eb1b-4ba2-a1e6-1f6200c7314b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45908","PortSpecifier":{"PortValue":45908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c23ba06-eb1b-4ba2-a1e6-1f6200c7314b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c23ba06-eb1b-4ba2-a1e6-1f6200c7314b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45908","PortSpecifier":{"PortValue":45908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443257,"nanos":357129656},"http":{"id":"8c23ba06-eb1b-4ba2-a1e6-1f6200c7314b","method":"POST","headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8c23ba06-eb1b-4ba2-a1e6-1f6200c7314b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c23ba06-eb1b-4ba2-a1e6-1f6200c7314b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c23ba06-eb1b-4ba2-a1e6-1f6200c7314b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c23ba06-eb1b-4ba2-a1e6-1f6200c7314b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c23ba06-eb1b-4ba2-a1e6-1f6200c7314b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c23ba06-eb1b-4ba2-a1e6-1f6200c7314b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c33bd/auth-test-model-3c33bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8c23ba06-eb1b-4ba2-a1e6-1f6200c7314b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c23ba06-eb1b-4ba2-a1e6-1f6200c7314b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c23ba06-eb1b-4ba2-a1e6-1f6200c7314b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c23ba06-eb1b-4ba2-a1e6-1f6200c7314b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c23ba06-eb1b-4ba2-a1e6-1f6200c7314b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7a87505-ce7e-4a9a-99e7-6d785acd2750","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48898","PortSpecifier":{"PortValue":48898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7a87505-ce7e-4a9a-99e7-6d785acd2750","method":"GET","path":"/maas-api/v1/api-keys/e41771b0-0dee-411b-88ae-e0ba0bfe2388","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7a87505-ce7e-4a9a-99e7-6d785acd2750","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48898","PortSpecifier":{"PortValue":48898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443257,"nanos":445256497},"http":{"id":"d7a87505-ce7e-4a9a-99e7-6d785acd2750","method":"GET","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e41771b0-0dee-411b-88ae-e0ba0bfe2388",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d7a87505-ce7e-4a9a-99e7-6d785acd2750","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7a87505-ce7e-4a9a-99e7-6d785acd2750","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7a87505-ce7e-4a9a-99e7-6d785acd2750","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e41771b0-0dee-411b-88ae-e0ba0bfe2388",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7a87505-ce7e-4a9a-99e7-6d785acd2750","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7a87505-ce7e-4a9a-99e7-6d785acd2750","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7a87505-ce7e-4a9a-99e7-6d785acd2750","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/auth-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d7a87505-ce7e-4a9a-99e7-6d785acd2750","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7a87505-ce7e-4a9a-99e7-6d785acd2750","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7a87505-ce7e-4a9a-99e7-6d785acd2750","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7a87505-ce7e-4a9a-99e7-6d785acd2750","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7a87505-ce7e-4a9a-99e7-6d785acd2750","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5164074d-e763-42c2-a91b-520eaf462ba7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45914","PortSpecifier":{"PortValue":45914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5164074d-e763-42c2-a91b-520eaf462ba7","method":"GET","path":"/maas-api/v1/api-keys/56841fbc-9a0e-47b0-b3de-c78f56cc8692","host":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5164074d-e763-42c2-a91b-520eaf462ba7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45914","PortSpecifier":{"PortValue":45914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443257,"nanos":481817493},"http":{"id":"5164074d-e763-42c2-a91b-520eaf462ba7","method":"GET","headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/56841fbc-9a0e-47b0-b3de-c78f56cc8692",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5164074d-e763-42c2-a91b-520eaf462ba7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5164074d-e763-42c2-a91b-520eaf462ba7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5164074d-e763-42c2-a91b-520eaf462ba7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/56841fbc-9a0e-47b0-b3de-c78f56cc8692",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5164074d-e763-42c2-a91b-520eaf462ba7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5164074d-e763-42c2-a91b-520eaf462ba7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5164074d-e763-42c2-a91b-520eaf462ba7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c33bd/auth-test-model-3c33bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5164074d-e763-42c2-a91b-520eaf462ba7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5164074d-e763-42c2-a91b-520eaf462ba7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5164074d-e763-42c2-a91b-520eaf462ba7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5164074d-e763-42c2-a91b-520eaf462ba7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5164074d-e763-42c2-a91b-520eaf462ba7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3d8f59f-0fd4-4363-9b31-c58ede13a3ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:39864","PortSpecifier":{"PortValue":39864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3d8f59f-0fd4-4363-9b31-c58ede13a3ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3d8f59f-0fd4-4363-9b31-c58ede13a3ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:39864","PortSpecifier":{"PortValue":39864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443274,"nanos":553954220},"http":{"id":"c3d8f59f-0fd4-4363-9b31-c58ede13a3ee","method":"POST","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3d8f59f-0fd4-4363-9b31-c58ede13a3ee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3d8f59f-0fd4-4363-9b31-c58ede13a3ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3d8f59f-0fd4-4363-9b31-c58ede13a3ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3d8f59f-0fd4-4363-9b31-c58ede13a3ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3d8f59f-0fd4-4363-9b31-c58ede13a3ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3d8f59f-0fd4-4363-9b31-c58ede13a3ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/auth-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3d8f59f-0fd4-4363-9b31-c58ede13a3ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3d8f59f-0fd4-4363-9b31-c58ede13a3ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3d8f59f-0fd4-4363-9b31-c58ede13a3ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3d8f59f-0fd4-4363-9b31-c58ede13a3ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3d8f59f-0fd4-4363-9b31-c58ede13a3ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e33c60e-e01d-4a89-9de1-1ed0f5605719","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45406","PortSpecifier":{"PortValue":45406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e33c60e-e01d-4a89-9de1-1ed0f5605719","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e33c60e-e01d-4a89-9de1-1ed0f5605719","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45406","PortSpecifier":{"PortValue":45406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443274,"nanos":590426840},"http":{"id":"9e33c60e-e01d-4a89-9de1-1ed0f5605719","method":"POST","headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9e33c60e-e01d-4a89-9de1-1ed0f5605719","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e33c60e-e01d-4a89-9de1-1ed0f5605719","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e33c60e-e01d-4a89-9de1-1ed0f5605719","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e33c60e-e01d-4a89-9de1-1ed0f5605719","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e33c60e-e01d-4a89-9de1-1ed0f5605719","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e33c60e-e01d-4a89-9de1-1ed0f5605719","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c33bd/auth-test-model-3c33bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e33c60e-e01d-4a89-9de1-1ed0f5605719","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e33c60e-e01d-4a89-9de1-1ed0f5605719","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e33c60e-e01d-4a89-9de1-1ed0f5605719","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e33c60e-e01d-4a89-9de1-1ed0f5605719","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e33c60e-e01d-4a89-9de1-1ed0f5605719","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77ee4715-0567-4fc0-a698-ee5e1d856fb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:39872","PortSpecifier":{"PortValue":39872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77ee4715-0567-4fc0-a698-ee5e1d856fb2","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77ee4715-0567-4fc0-a698-ee5e1d856fb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:39872","PortSpecifier":{"PortValue":39872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443274,"nanos":628697285},"http":{"id":"77ee4715-0567-4fc0-a698-ee5e1d856fb2","method":"GET","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77ee4715-0567-4fc0-a698-ee5e1d856fb2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RZMvd5sf8feaCdwQ_uDpO3i4aX7tsrovde5lTbWrdwUrzTrn8JaKy78WhTq2"}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77ee4715-0567-4fc0-a698-ee5e1d856fb2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RZMvd5sf8feaCdwQ_uDpO3i4aX7tsrovde5lTbWrdwUrzTrn8JaKy78WhTq2\"}"}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77ee4715-0567-4fc0-a698-ee5e1d856fb2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d2ebee1-c0e3-4493-927f-48d86d5866e7","keyName":"e2e-auth-iso-a-91da0e","subscription":"e2e-auth-iso-4f8675","tenant":"e2e-shared-a-9926c0","userId":"6d2ebee1-c0e3-4493-927f-48d86d5866e7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77ee4715-0567-4fc0-a698-ee5e1d856fb2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77ee4715-0567-4fc0-a698-ee5e1d856fb2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77ee4715-0567-4fc0-a698-ee5e1d856fb2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77ee4715-0567-4fc0-a698-ee5e1d856fb2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/auth-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77ee4715-0567-4fc0-a698-ee5e1d856fb2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"77ee4715-0567-4fc0-a698-ee5e1d856fb2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77ee4715-0567-4fc0-a698-ee5e1d856fb2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-4f8675"}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77ee4715-0567-4fc0-a698-ee5e1d856fb2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77ee4715-0567-4fc0-a698-ee5e1d856fb2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77ee4715-0567-4fc0-a698-ee5e1d856fb2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"280052b4-13a1-4193-8304-b5b2700e40f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:50682","PortSpecifier":{"PortValue":50682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"280052b4-13a1-4193-8304-b5b2700e40f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"280052b4-13a1-4193-8304-b5b2700e40f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:50682","PortSpecifier":{"PortValue":50682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443289,"nanos":593709372},"http":{"id":"280052b4-13a1-4193-8304-b5b2700e40f2","method":"POST","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"280052b4-13a1-4193-8304-b5b2700e40f2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"280052b4-13a1-4193-8304-b5b2700e40f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"280052b4-13a1-4193-8304-b5b2700e40f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"280052b4-13a1-4193-8304-b5b2700e40f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"280052b4-13a1-4193-8304-b5b2700e40f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"280052b4-13a1-4193-8304-b5b2700e40f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/auth-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"280052b4-13a1-4193-8304-b5b2700e40f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"280052b4-13a1-4193-8304-b5b2700e40f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"280052b4-13a1-4193-8304-b5b2700e40f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"280052b4-13a1-4193-8304-b5b2700e40f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"280052b4-13a1-4193-8304-b5b2700e40f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0d609bd-1e00-4dbf-ac5d-206ee40ecb39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49936","PortSpecifier":{"PortValue":49936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0d609bd-1e00-4dbf-ac5d-206ee40ecb39","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0d609bd-1e00-4dbf-ac5d-206ee40ecb39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49936","PortSpecifier":{"PortValue":49936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443289,"nanos":629164087},"http":{"id":"a0d609bd-1e00-4dbf-ac5d-206ee40ecb39","method":"POST","headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a0d609bd-1e00-4dbf-ac5d-206ee40ecb39","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0d609bd-1e00-4dbf-ac5d-206ee40ecb39","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0d609bd-1e00-4dbf-ac5d-206ee40ecb39","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0d609bd-1e00-4dbf-ac5d-206ee40ecb39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0d609bd-1e00-4dbf-ac5d-206ee40ecb39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0d609bd-1e00-4dbf-ac5d-206ee40ecb39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c33bd/auth-test-model-3c33bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a0d609bd-1e00-4dbf-ac5d-206ee40ecb39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0d609bd-1e00-4dbf-ac5d-206ee40ecb39","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0d609bd-1e00-4dbf-ac5d-206ee40ecb39","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0d609bd-1e00-4dbf-ac5d-206ee40ecb39","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0d609bd-1e00-4dbf-ac5d-206ee40ecb39","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ce9033f-a621-4ea0-b14f-71cce865408d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49940","PortSpecifier":{"PortValue":49940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ce9033f-a621-4ea0-b14f-71cce865408d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ce9033f-a621-4ea0-b14f-71cce865408d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49940","PortSpecifier":{"PortValue":49940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443289,"nanos":667598873},"http":{"id":"7ce9033f-a621-4ea0-b14f-71cce865408d","method":"GET","headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ce9033f-a621-4ea0-b14f-71cce865408d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WgN6EtOHLwxBgtIc_F4Z9aeAHVzilKlrvICAMszzUCuqNwVCflwv6YfEyX47"}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ce9033f-a621-4ea0-b14f-71cce865408d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3c33bd.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WgN6EtOHLwxBgtIc_F4Z9aeAHVzilKlrvICAMszzUCuqNwVCflwv6YfEyX47\"}"}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ce9033f-a621-4ea0-b14f-71cce865408d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3c33bd.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ce9033f-a621-4ea0-b14f-71cce865408d","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"7ce9033f-a621-4ea0-b14f-71cce865408d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ce9033f-a621-4ea0-b14f-71cce865408d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T16:54:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ce9033f-a621-4ea0-b14f-71cce865408d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d037caba-3f99-41a6-834c-f97450060944","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46900","PortSpecifier":{"PortValue":46900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d037caba-3f99-41a6-834c-f97450060944","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d037caba-3f99-41a6-834c-f97450060944","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46900","PortSpecifier":{"PortValue":46900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443306,"nanos":773585735},"http":{"id":"d037caba-3f99-41a6-834c-f97450060944","method":"POST","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d037caba-3f99-41a6-834c-f97450060944","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d037caba-3f99-41a6-834c-f97450060944","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d037caba-3f99-41a6-834c-f97450060944","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d037caba-3f99-41a6-834c-f97450060944","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d037caba-3f99-41a6-834c-f97450060944","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d037caba-3f99-41a6-834c-f97450060944","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/auth-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d037caba-3f99-41a6-834c-f97450060944","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d037caba-3f99-41a6-834c-f97450060944","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d037caba-3f99-41a6-834c-f97450060944","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d037caba-3f99-41a6-834c-f97450060944","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d037caba-3f99-41a6-834c-f97450060944","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abb46064-d6c8-4d20-b03c-068d680c624a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:50822","PortSpecifier":{"PortValue":50822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"abb46064-d6c8-4d20-b03c-068d680c624a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abb46064-d6c8-4d20-b03c-068d680c624a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:50822","PortSpecifier":{"PortValue":50822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443306,"nanos":811070813},"http":{"id":"abb46064-d6c8-4d20-b03c-068d680c624a","method":"POST","headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"abb46064-d6c8-4d20-b03c-068d680c624a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"abb46064-d6c8-4d20-b03c-068d680c624a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"abb46064-d6c8-4d20-b03c-068d680c624a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abb46064-d6c8-4d20-b03c-068d680c624a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abb46064-d6c8-4d20-b03c-068d680c624a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abb46064-d6c8-4d20-b03c-068d680c624a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c33bd/auth-test-model-3c33bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"abb46064-d6c8-4d20-b03c-068d680c624a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abb46064-d6c8-4d20-b03c-068d680c624a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abb46064-d6c8-4d20-b03c-068d680c624a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abb46064-d6c8-4d20-b03c-068d680c624a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abb46064-d6c8-4d20-b03c-068d680c624a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5580152-a3cc-4bb6-9d86-02fbdedaafca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46912","PortSpecifier":{"PortValue":46912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f5580152-a3cc-4bb6-9d86-02fbdedaafca","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5580152-a3cc-4bb6-9d86-02fbdedaafca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46912","PortSpecifier":{"PortValue":46912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443306,"nanos":845458554},"http":{"id":"f5580152-a3cc-4bb6-9d86-02fbdedaafca","method":"POST","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f5580152-a3cc-4bb6-9d86-02fbdedaafca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f5580152-a3cc-4bb6-9d86-02fbdedaafca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f5580152-a3cc-4bb6-9d86-02fbdedaafca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5580152-a3cc-4bb6-9d86-02fbdedaafca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5580152-a3cc-4bb6-9d86-02fbdedaafca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5580152-a3cc-4bb6-9d86-02fbdedaafca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/auth-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f5580152-a3cc-4bb6-9d86-02fbdedaafca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5580152-a3cc-4bb6-9d86-02fbdedaafca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5580152-a3cc-4bb6-9d86-02fbdedaafca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5580152-a3cc-4bb6-9d86-02fbdedaafca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5580152-a3cc-4bb6-9d86-02fbdedaafca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc9077e1-f3c3-4cf2-8bec-3ba45a4f06b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:50836","PortSpecifier":{"PortValue":50836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc9077e1-f3c3-4cf2-8bec-3ba45a4f06b9","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc9077e1-f3c3-4cf2-8bec-3ba45a4f06b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:50836","PortSpecifier":{"PortValue":50836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443306,"nanos":877743353},"http":{"id":"cc9077e1-f3c3-4cf2-8bec-3ba45a4f06b9","method":"POST","headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc9077e1-f3c3-4cf2-8bec-3ba45a4f06b9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc9077e1-f3c3-4cf2-8bec-3ba45a4f06b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc9077e1-f3c3-4cf2-8bec-3ba45a4f06b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc9077e1-f3c3-4cf2-8bec-3ba45a4f06b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc9077e1-f3c3-4cf2-8bec-3ba45a4f06b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc9077e1-f3c3-4cf2-8bec-3ba45a4f06b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c33bd/auth-test-model-3c33bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc9077e1-f3c3-4cf2-8bec-3ba45a4f06b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc9077e1-f3c3-4cf2-8bec-3ba45a4f06b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc9077e1-f3c3-4cf2-8bec-3ba45a4f06b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc9077e1-f3c3-4cf2-8bec-3ba45a4f06b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:55:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc9077e1-f3c3-4cf2-8bec-3ba45a4f06b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f34f0b6-72f6-4a61-bb80-4b06af293e37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49684","PortSpecifier":{"PortValue":49684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f34f0b6-72f6-4a61-bb80-4b06af293e37","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f34f0b6-72f6-4a61-bb80-4b06af293e37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49684","PortSpecifier":{"PortValue":49684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443329,"nanos":122121230},"http":{"id":"5f34f0b6-72f6-4a61-bb80-4b06af293e37","method":"POST","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f34f0b6-72f6-4a61-bb80-4b06af293e37","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f34f0b6-72f6-4a61-bb80-4b06af293e37","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f34f0b6-72f6-4a61-bb80-4b06af293e37","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f34f0b6-72f6-4a61-bb80-4b06af293e37","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f34f0b6-72f6-4a61-bb80-4b06af293e37","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f34f0b6-72f6-4a61-bb80-4b06af293e37","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/auth-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f34f0b6-72f6-4a61-bb80-4b06af293e37","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f34f0b6-72f6-4a61-bb80-4b06af293e37","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f34f0b6-72f6-4a61-bb80-4b06af293e37","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f34f0b6-72f6-4a61-bb80-4b06af293e37","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f34f0b6-72f6-4a61-bb80-4b06af293e37","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69de8d12-0b72-4388-82f9-042e2fd95199","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58746","PortSpecifier":{"PortValue":58746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69de8d12-0b72-4388-82f9-042e2fd95199","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69de8d12-0b72-4388-82f9-042e2fd95199","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58746","PortSpecifier":{"PortValue":58746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443329,"nanos":156479535},"http":{"id":"69de8d12-0b72-4388-82f9-042e2fd95199","method":"POST","headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69de8d12-0b72-4388-82f9-042e2fd95199","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69de8d12-0b72-4388-82f9-042e2fd95199","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69de8d12-0b72-4388-82f9-042e2fd95199","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69de8d12-0b72-4388-82f9-042e2fd95199","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69de8d12-0b72-4388-82f9-042e2fd95199","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69de8d12-0b72-4388-82f9-042e2fd95199","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c33bd/auth-test-model-3c33bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69de8d12-0b72-4388-82f9-042e2fd95199","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69de8d12-0b72-4388-82f9-042e2fd95199","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69de8d12-0b72-4388-82f9-042e2fd95199","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69de8d12-0b72-4388-82f9-042e2fd95199","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69de8d12-0b72-4388-82f9-042e2fd95199","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"499296af-1be6-4ab4-a256-3ed82fc497d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58750","PortSpecifier":{"PortValue":58750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"499296af-1be6-4ab4-a256-3ed82fc497d4","method":"GET","path":"/maas-api/v1/api-keys/c06da644-5e17-4261-a5c4-397fa5ede59c","host":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"499296af-1be6-4ab4-a256-3ed82fc497d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58750","PortSpecifier":{"PortValue":58750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443329,"nanos":194609915},"http":{"id":"499296af-1be6-4ab4-a256-3ed82fc497d4","method":"GET","headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c06da644-5e17-4261-a5c4-397fa5ede59c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"499296af-1be6-4ab4-a256-3ed82fc497d4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"499296af-1be6-4ab4-a256-3ed82fc497d4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"499296af-1be6-4ab4-a256-3ed82fc497d4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c06da644-5e17-4261-a5c4-397fa5ede59c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"499296af-1be6-4ab4-a256-3ed82fc497d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"499296af-1be6-4ab4-a256-3ed82fc497d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"499296af-1be6-4ab4-a256-3ed82fc497d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c33bd/auth-test-model-3c33bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"499296af-1be6-4ab4-a256-3ed82fc497d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"499296af-1be6-4ab4-a256-3ed82fc497d4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"499296af-1be6-4ab4-a256-3ed82fc497d4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"499296af-1be6-4ab4-a256-3ed82fc497d4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"499296af-1be6-4ab4-a256-3ed82fc497d4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e5c0194-2ca0-4d72-ad8c-1fa2d592ea4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49700","PortSpecifier":{"PortValue":49700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e5c0194-2ca0-4d72-ad8c-1fa2d592ea4c","method":"GET","path":"/maas-api/v1/api-keys/c06da644-5e17-4261-a5c4-397fa5ede59c","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e5c0194-2ca0-4d72-ad8c-1fa2d592ea4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49700","PortSpecifier":{"PortValue":49700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443329,"nanos":227358836},"http":{"id":"0e5c0194-2ca0-4d72-ad8c-1fa2d592ea4c","method":"GET","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c06da644-5e17-4261-a5c4-397fa5ede59c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e5c0194-2ca0-4d72-ad8c-1fa2d592ea4c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e5c0194-2ca0-4d72-ad8c-1fa2d592ea4c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e5c0194-2ca0-4d72-ad8c-1fa2d592ea4c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c06da644-5e17-4261-a5c4-397fa5ede59c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e5c0194-2ca0-4d72-ad8c-1fa2d592ea4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e5c0194-2ca0-4d72-ad8c-1fa2d592ea4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e5c0194-2ca0-4d72-ad8c-1fa2d592ea4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/auth-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e5c0194-2ca0-4d72-ad8c-1fa2d592ea4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e5c0194-2ca0-4d72-ad8c-1fa2d592ea4c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e5c0194-2ca0-4d72-ad8c-1fa2d592ea4c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e5c0194-2ca0-4d72-ad8c-1fa2d592ea4c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:55:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e5c0194-2ca0-4d72-ad8c-1fa2d592ea4c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5705bdda-d81a-4918-bebb-c21e5d0d28b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45208","PortSpecifier":{"PortValue":45208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5705bdda-d81a-4918-bebb-c21e5d0d28b3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5705bdda-d81a-4918-bebb-c21e5d0d28b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45208","PortSpecifier":{"PortValue":45208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443344,"nanos":208634886},"http":{"id":"5705bdda-d81a-4918-bebb-c21e5d0d28b3","method":"POST","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5705bdda-d81a-4918-bebb-c21e5d0d28b3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5705bdda-d81a-4918-bebb-c21e5d0d28b3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5705bdda-d81a-4918-bebb-c21e5d0d28b3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5705bdda-d81a-4918-bebb-c21e5d0d28b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5705bdda-d81a-4918-bebb-c21e5d0d28b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5705bdda-d81a-4918-bebb-c21e5d0d28b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/auth-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5705bdda-d81a-4918-bebb-c21e5d0d28b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5705bdda-d81a-4918-bebb-c21e5d0d28b3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5705bdda-d81a-4918-bebb-c21e5d0d28b3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5705bdda-d81a-4918-bebb-c21e5d0d28b3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5705bdda-d81a-4918-bebb-c21e5d0d28b3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"229f7be4-eb66-4cf3-97b3-3987c1b43d2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:35958","PortSpecifier":{"PortValue":35958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"229f7be4-eb66-4cf3-97b3-3987c1b43d2e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"229f7be4-eb66-4cf3-97b3-3987c1b43d2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:35958","PortSpecifier":{"PortValue":35958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443344,"nanos":243058805},"http":{"id":"229f7be4-eb66-4cf3-97b3-3987c1b43d2e","method":"POST","headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"229f7be4-eb66-4cf3-97b3-3987c1b43d2e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"229f7be4-eb66-4cf3-97b3-3987c1b43d2e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"229f7be4-eb66-4cf3-97b3-3987c1b43d2e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"229f7be4-eb66-4cf3-97b3-3987c1b43d2e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"229f7be4-eb66-4cf3-97b3-3987c1b43d2e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"229f7be4-eb66-4cf3-97b3-3987c1b43d2e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c33bd/auth-test-model-3c33bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"229f7be4-eb66-4cf3-97b3-3987c1b43d2e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"229f7be4-eb66-4cf3-97b3-3987c1b43d2e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"229f7be4-eb66-4cf3-97b3-3987c1b43d2e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"229f7be4-eb66-4cf3-97b3-3987c1b43d2e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"229f7be4-eb66-4cf3-97b3-3987c1b43d2e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64981b08-84f2-443d-bf9a-6c22d59605fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45218","PortSpecifier":{"PortValue":45218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"64981b08-84f2-443d-bf9a-6c22d59605fd","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64981b08-84f2-443d-bf9a-6c22d59605fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45218","PortSpecifier":{"PortValue":45218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443344,"nanos":282804166},"http":{"id":"64981b08-84f2-443d-bf9a-6c22d59605fd","method":"POST","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"64981b08-84f2-443d-bf9a-6c22d59605fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dgfLYRwcikI7kAQ5_IzxuP1oPFh2Zl6K4btixs2NTqWSqQjGQVbxXuPVn1i"}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"64981b08-84f2-443d-bf9a-6c22d59605fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dgfLYRwcikI7kAQ5_IzxuP1oPFh2Zl6K4btixs2NTqWSqQjGQVbxXuPVn1i\"}"}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"64981b08-84f2-443d-bf9a-6c22d59605fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb288cb1-30be-448e-a9e1-26465d8ce360","keyName":"e2e-auth-iso-a-4c7729","subscription":"e2e-auth-iso-930d34","tenant":"e2e-shared-a-9926c0","userId":"fb288cb1-30be-448e-a9e1-26465d8ce360","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"64981b08-84f2-443d-bf9a-6c22d59605fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64981b08-84f2-443d-bf9a-6c22d59605fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64981b08-84f2-443d-bf9a-6c22d59605fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64981b08-84f2-443d-bf9a-6c22d59605fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/auth-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64981b08-84f2-443d-bf9a-6c22d59605fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64981b08-84f2-443d-bf9a-6c22d59605fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-930d34"}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64981b08-84f2-443d-bf9a-6c22d59605fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"64981b08-84f2-443d-bf9a-6c22d59605fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64981b08-84f2-443d-bf9a-6c22d59605fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64981b08-84f2-443d-bf9a-6c22d59605fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a7c3c1040bc9fa70491aec421ca0d7b6c369925fd16f79210df3e063fbe8cea"}
{"level":"info","ts":"2026-07-07T16:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6535d0372a82f56c66d12fb6dad7196850af07e2ea38797817b9cec461398c39"}
{"level":"info","ts":"2026-07-07T16:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/568d21d0460da8c62ed4bc679c732453ee547d689286e1d95dee1512bbfacff5"}
{"level":"info","ts":"2026-07-07T16:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9eb062904b9792d5c0a8b7986130950f91137ed049da23f782600c408290437"}
{"level":"info","ts":"2026-07-07T16:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1d460ed5afe3d6035460cdd19ee2daf655e683e28581ccbe164fca3e65e9b5e"}
{"level":"info","ts":"2026-07-07T16:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57b283ac82df4e65a85953844fb34af5ca48443e842ff2162d4cc72c5d0e86f8"}
{"level":"info","ts":"2026-07-07T16:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c0450707b189aae878a7ce297a7b02648c705aa9603009cf9606eb6b4421f2a"}
{"level":"info","ts":"2026-07-07T16:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e286a791263853db02fdbc833ca0c826ae41b2704a28ff0dc0add41421f375d"}
{"level":"info","ts":"2026-07-07T16:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/566bd1af8a5d6d839604b68a0d67732de13ec7d0f0af9532c804b757d17512eb"}
{"level":"info","ts":"2026-07-07T16:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12a1af933a1de0410a841899cb9f150bb59a17d52489646be4521e7635836b27"}
{"level":"info","ts":"2026-07-07T16:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5004ef945515ccc31671d7e0ffd4b541d35f69e6101c5e58cad8f4c97855d0aa"}
{"level":"info","ts":"2026-07-07T16:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ffb17701b5ee632906a2155fb98c78f142de599ed7b3dbf253a415a48185049"}
{"level":"info","ts":"2026-07-07T16:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c32077d9d8d3913408d86f0a05b48689165b9cbb3acbf968776dc9662b10f7b4"}
{"level":"info","ts":"2026-07-07T16:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea73e856a2bee208b696232eb8b2baaa992d16577ebf59cc34f87bf94c5cb3a0"}
{"level":"info","ts":"2026-07-07T16:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b30cabf29b30e8c4fcc1f79d9b41cdbaf2b7e3f698642b2cf41184387123ba1"}
{"level":"info","ts":"2026-07-07T16:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/562e57e68ab788a4ad09db9904c961f39d96274679b3085120968e2b4d3cc172"}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8"}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8"}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8"}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8"}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8"}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8"}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8"}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"253dc8e73fb9da2cfc2f4fa7fe0b0355e9fb37483aa53cf34a84e1c1378b8dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"253dc8e73fb9da2cfc2f4fa7fe0b0355e9fb37483aa53cf34a84e1c1378b8dc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8"}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"253dc8e73fb9da2cfc2f4fa7fe0b0355e9fb37483aa53cf34a84e1c1378b8dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/253dc8e73fb9da2cfc2f4fa7fe0b0355e9fb37483aa53cf34a84e1c1378b8dc4"}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"253dc8e73fb9da2cfc2f4fa7fe0b0355e9fb37483aa53cf34a84e1c1378b8dc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"253dc8e73fb9da2cfc2f4fa7fe0b0355e9fb37483aa53cf34a84e1c1378b8dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["253dc8e73fb9da2cfc2f4fa7fe0b0355e9fb37483aa53cf34a84e1c1378b8dc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"253dc8e73fb9da2cfc2f4fa7fe0b0355e9fb37483aa53cf34a84e1c1378b8dc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/253dc8e73fb9da2cfc2f4fa7fe0b0355e9fb37483aa53cf34a84e1c1378b8dc4"}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"253dc8e73fb9da2cfc2f4fa7fe0b0355e9fb37483aa53cf34a84e1c1378b8dc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bea48a26e6a13c290ee5e23e406b310309b380c7023ccb67fbde33e0668acb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bea48a26e6a13c290ee5e23e406b310309b380c7023ccb67fbde33e0668acb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/253dc8e73fb9da2cfc2f4fa7fe0b0355e9fb37483aa53cf34a84e1c1378b8dc4"}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bea48a26e6a13c290ee5e23e406b310309b380c7023ccb67fbde33e0668acb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bea48a26e6a13c290ee5e23e406b310309b380c7023ccb67fbde33e0668acb0"}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bea48a26e6a13c290ee5e23e406b310309b380c7023ccb67fbde33e0668acb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bea48a26e6a13c290ee5e23e406b310309b380c7023ccb67fbde33e0668acb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bea48a26e6a13c290ee5e23e406b310309b380c7023ccb67fbde33e0668acb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bea48a26e6a13c290ee5e23e406b310309b380c7023ccb67fbde33e0668acb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bea48a26e6a13c290ee5e23e406b310309b380c7023ccb67fbde33e0668acb0"}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bea48a26e6a13c290ee5e23e406b310309b380c7023ccb67fbde33e0668acb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bea48a26e6a13c290ee5e23e406b310309b380c7023ccb67fbde33e0668acb0"}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e"}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e"}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f74966b59d11c1023cb53f48275de67625c9e31d0b782d39ff7f98e625452332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f74966b59d11c1023cb53f48275de67625c9e31d0b782d39ff7f98e625452332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64aad6ea3ea36d6c5c7a69db6459f1cdedec331ed5bbfd8780933cc524f72abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f74966b59d11c1023cb53f48275de67625c9e31d0b782d39ff7f98e625452332"}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64aad6ea3ea36d6c5c7a69db6459f1cdedec331ed5bbfd8780933cc524f72abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f74966b59d11c1023cb53f48275de67625c9e31d0b782d39ff7f98e625452332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f74966b59d11c1023cb53f48275de67625c9e31d0b782d39ff7f98e625452332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f74966b59d11c1023cb53f48275de67625c9e31d0b782d39ff7f98e625452332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64aad6ea3ea36d6c5c7a69db6459f1cdedec331ed5bbfd8780933cc524f72abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64aad6ea3ea36d6c5c7a69db6459f1cdedec331ed5bbfd8780933cc524f72abe"}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64aad6ea3ea36d6c5c7a69db6459f1cdedec331ed5bbfd8780933cc524f72abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f74966b59d11c1023cb53f48275de67625c9e31d0b782d39ff7f98e625452332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f74966b59d11c1023cb53f48275de67625c9e31d0b782d39ff7f98e625452332"}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f74966b59d11c1023cb53f48275de67625c9e31d0b782d39ff7f98e625452332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a1781cf3327e7b267556076e32c0a9fe106936eb99c39e24fb8d37a4e9288b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e"}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a1781cf3327e7b267556076e32c0a9fe106936eb99c39e24fb8d37a4e9288b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64aad6ea3ea36d6c5c7a69db6459f1cdedec331ed5bbfd8780933cc524f72abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64aad6ea3ea36d6c5c7a69db6459f1cdedec331ed5bbfd8780933cc524f72abe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a1781cf3327e7b267556076e32c0a9fe106936eb99c39e24fb8d37a4e9288b"}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64aad6ea3ea36d6c5c7a69db6459f1cdedec331ed5bbfd8780933cc524f72abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f74966b59d11c1023cb53f48275de67625c9e31d0b782d39ff7f98e625452332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f74966b59d11c1023cb53f48275de67625c9e31d0b782d39ff7f98e625452332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64aad6ea3ea36d6c5c7a69db6459f1cdedec331ed5bbfd8780933cc524f72abe"}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f74966b59d11c1023cb53f48275de67625c9e31d0b782d39ff7f98e625452332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a1781cf3327e7b267556076e32c0a9fe106936eb99c39e24fb8d37a4e9288b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1a1781cf3327e7b267556076e32c0a9fe106936eb99c39e24fb8d37a4e9288b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f74966b59d11c1023cb53f48275de67625c9e31d0b782d39ff7f98e625452332"}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a1781cf3327e7b267556076e32c0a9fe106936eb99c39e24fb8d37a4e9288b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64aad6ea3ea36d6c5c7a69db6459f1cdedec331ed5bbfd8780933cc524f72abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f74966b59d11c1023cb53f48275de67625c9e31d0b782d39ff7f98e625452332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e"}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a1781cf3327e7b267556076e32c0a9fe106936eb99c39e24fb8d37a4e9288b"}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a1781cf3327e7b267556076e32c0a9fe106936eb99c39e24fb8d37a4e9288b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64aad6ea3ea36d6c5c7a69db6459f1cdedec331ed5bbfd8780933cc524f72abe"}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f74966b59d11c1023cb53f48275de67625c9e31d0b782d39ff7f98e625452332"}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e"}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e"}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e"}
{"level":"error","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e"}
{"level":"error","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ec0d8e28170929fc846ddf88bafa66fb606d8de0aa9d58ddbce1f3fabe31aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ec0d8e28170929fc846ddf88bafa66fb606d8de0aa9d58ddbce1f3fabe31aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ec0d8e28170929fc846ddf88bafa66fb606d8de0aa9d58ddbce1f3fabe31aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ec0d8e28170929fc846ddf88bafa66fb606d8de0aa9d58ddbce1f3fabe31aa"}
{"level":"debug","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ec0d8e28170929fc846ddf88bafa66fb606d8de0aa9d58ddbce1f3fabe31aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ec0d8e28170929fc846ddf88bafa66fb606d8de0aa9d58ddbce1f3fabe31aa"}
{"level":"debug","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ec0d8e28170929fc846ddf88bafa66fb606d8de0aa9d58ddbce1f3fabe31aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0ec0d8e28170929fc846ddf88bafa66fb606d8de0aa9d58ddbce1f3fabe31aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ec0d8e28170929fc846ddf88bafa66fb606d8de0aa9d58ddbce1f3fabe31aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ec0d8e28170929fc846ddf88bafa66fb606d8de0aa9d58ddbce1f3fabe31aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ec0d8e28170929fc846ddf88bafa66fb606d8de0aa9d58ddbce1f3fabe31aa"}
{"level":"debug","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36"}
{"level":"info","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36"}
{"level":"debug","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36"}
{"level":"debug","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36"}
{"level":"debug","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36"}
{"level":"debug","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36"}
{"level":"debug","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36"}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d640fa469a26897f4105e1df1b6045d1cd8ab075d702a7a165f47fc9d970ec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d640fa469a26897f4105e1df1b6045d1cd8ab075d702a7a165f47fc9d970ec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d640fa469a26897f4105e1df1b6045d1cd8ab075d702a7a165f47fc9d970ec7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d640fa469a26897f4105e1df1b6045d1cd8ab075d702a7a165f47fc9d970ec7"}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d640fa469a26897f4105e1df1b6045d1cd8ab075d702a7a165f47fc9d970ec7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d640fa469a26897f4105e1df1b6045d1cd8ab075d702a7a165f47fc9d970ec7"}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d640fa469a26897f4105e1df1b6045d1cd8ab075d702a7a165f47fc9d970ec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d640fa469a26897f4105e1df1b6045d1cd8ab075d702a7a165f47fc9d970ec7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d640fa469a26897f4105e1df1b6045d1cd8ab075d702a7a165f47fc9d970ec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d640fa469a26897f4105e1df1b6045d1cd8ab075d702a7a165f47fc9d970ec7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d640fa469a26897f4105e1df1b6045d1cd8ab075d702a7a165f47fc9d970ec7"}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251"}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251"}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251"}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51"}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251"}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51"}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251"}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"652ba9fd4de8261cd3636b1900cdf942e8bc709334e4e8521727bf89e266eb27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/652ba9fd4de8261cd3636b1900cdf942e8bc709334e4e8521727bf89e266eb27"}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"652ba9fd4de8261cd3636b1900cdf942e8bc709334e4e8521727bf89e266eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51"}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"652ba9fd4de8261cd3636b1900cdf942e8bc709334e4e8521727bf89e266eb27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["652ba9fd4de8261cd3636b1900cdf942e8bc709334e4e8521727bf89e266eb27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"652ba9fd4de8261cd3636b1900cdf942e8bc709334e4e8521727bf89e266eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251"}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/652ba9fd4de8261cd3636b1900cdf942e8bc709334e4e8521727bf89e266eb27"}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"652ba9fd4de8261cd3636b1900cdf942e8bc709334e4e8521727bf89e266eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51"}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f684c2c8ac73a5dae95427b0b44ab8c558df4819cc211d1f2e5556ecb2423612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f684c2c8ac73a5dae95427b0b44ab8c558df4819cc211d1f2e5556ecb2423612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f684c2c8ac73a5dae95427b0b44ab8c558df4819cc211d1f2e5556ecb2423612"}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f684c2c8ac73a5dae95427b0b44ab8c558df4819cc211d1f2e5556ecb2423612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f684c2c8ac73a5dae95427b0b44ab8c558df4819cc211d1f2e5556ecb2423612"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251"}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f684c2c8ac73a5dae95427b0b44ab8c558df4819cc211d1f2e5556ecb2423612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f684c2c8ac73a5dae95427b0b44ab8c558df4819cc211d1f2e5556ecb2423612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51"}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f684c2c8ac73a5dae95427b0b44ab8c558df4819cc211d1f2e5556ecb2423612"}
{"level":"info","ts":"2026-07-07T16:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51"}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"652ba9fd4de8261cd3636b1900cdf942e8bc709334e4e8521727bf89e266eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/652ba9fd4de8261cd3636b1900cdf942e8bc709334e4e8521727bf89e266eb27"}
{"level":"info","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"}
{"level":"info","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"}
{"level":"debug","ts":"2026-07-07T16:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ec0d8e28170929fc846ddf88bafa66fb606d8de0aa9d58ddbce1f3fabe31aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a1781cf3327e7b267556076e32c0a9fe106936eb99c39e24fb8d37a4e9288b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ec0d8e28170929fc846ddf88bafa66fb606d8de0aa9d58ddbce1f3fabe31aa"}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a1781cf3327e7b267556076e32c0a9fe106936eb99c39e24fb8d37a4e9288b"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319"}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bea48a26e6a13c290ee5e23e406b310309b380c7023ccb67fbde33e0668acb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bea48a26e6a13c290ee5e23e406b310309b380c7023ccb67fbde33e0668acb0"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e"}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f684c2c8ac73a5dae95427b0b44ab8c558df4819cc211d1f2e5556ecb2423612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f684c2c8ac73a5dae95427b0b44ab8c558df4819cc211d1f2e5556ecb2423612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64aad6ea3ea36d6c5c7a69db6459f1cdedec331ed5bbfd8780933cc524f72abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f684c2c8ac73a5dae95427b0b44ab8c558df4819cc211d1f2e5556ecb2423612","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f684c2c8ac73a5dae95427b0b44ab8c558df4819cc211d1f2e5556ecb2423612"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f684c2c8ac73a5dae95427b0b44ab8c558df4819cc211d1f2e5556ecb2423612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f684c2c8ac73a5dae95427b0b44ab8c558df4819cc211d1f2e5556ecb2423612"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f684c2c8ac73a5dae95427b0b44ab8c558df4819cc211d1f2e5556ecb2423612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d640fa469a26897f4105e1df1b6045d1cd8ab075d702a7a165f47fc9d970ec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f684c2c8ac73a5dae95427b0b44ab8c558df4819cc211d1f2e5556ecb2423612","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f74966b59d11c1023cb53f48275de67625c9e31d0b782d39ff7f98e625452332","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64aad6ea3ea36d6c5c7a69db6459f1cdedec331ed5bbfd8780933cc524f72abe"}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f684c2c8ac73a5dae95427b0b44ab8c558df4819cc211d1f2e5556ecb2423612"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d640fa469a26897f4105e1df1b6045d1cd8ab075d702a7a165f47fc9d970ec7"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f74966b59d11c1023cb53f48275de67625c9e31d0b782d39ff7f98e625452332"}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51"}
{"level":"debug","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"253dc8e73fb9da2cfc2f4fa7fe0b0355e9fb37483aa53cf34a84e1c1378b8dc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251"}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36"}
{"level":"info","ts":"2026-07-07T16:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/253dc8e73fb9da2cfc2f4fa7fe0b0355e9fb37483aa53cf34a84e1c1378b8dc4"}
{"level":"info","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b09f6dfc-49cc-46a0-a386-70f43383e0b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47260","PortSpecifier":{"PortValue":47260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b09f6dfc-49cc-46a0-a386-70f43383e0b6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b09f6dfc-49cc-46a0-a386-70f43383e0b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47260","PortSpecifier":{"PortValue":47260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443412,"nanos":748143412},"http":{"id":"b09f6dfc-49cc-46a0-a386-70f43383e0b6","method":"POST","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b09f6dfc-49cc-46a0-a386-70f43383e0b6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b09f6dfc-49cc-46a0-a386-70f43383e0b6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b09f6dfc-49cc-46a0-a386-70f43383e0b6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b09f6dfc-49cc-46a0-a386-70f43383e0b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b09f6dfc-49cc-46a0-a386-70f43383e0b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b09f6dfc-49cc-46a0-a386-70f43383e0b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/sub-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b09f6dfc-49cc-46a0-a386-70f43383e0b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b09f6dfc-49cc-46a0-a386-70f43383e0b6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b09f6dfc-49cc-46a0-a386-70f43383e0b6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b09f6dfc-49cc-46a0-a386-70f43383e0b6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b09f6dfc-49cc-46a0-a386-70f43383e0b6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2598cf4e-b53e-46f1-9f2a-b51dfb4c01a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55730","PortSpecifier":{"PortValue":55730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2598cf4e-b53e-46f1-9f2a-b51dfb4c01a8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2598cf4e-b53e-46f1-9f2a-b51dfb4c01a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55730","PortSpecifier":{"PortValue":55730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443412,"nanos":786885447},"http":{"id":"2598cf4e-b53e-46f1-9f2a-b51dfb4c01a8","method":"POST","headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2598cf4e-b53e-46f1-9f2a-b51dfb4c01a8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2598cf4e-b53e-46f1-9f2a-b51dfb4c01a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2598cf4e-b53e-46f1-9f2a-b51dfb4c01a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2598cf4e-b53e-46f1-9f2a-b51dfb4c01a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2598cf4e-b53e-46f1-9f2a-b51dfb4c01a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2598cf4e-b53e-46f1-9f2a-b51dfb4c01a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c33bd/sub-test-model-3c33bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2598cf4e-b53e-46f1-9f2a-b51dfb4c01a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2598cf4e-b53e-46f1-9f2a-b51dfb4c01a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2598cf4e-b53e-46f1-9f2a-b51dfb4c01a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2598cf4e-b53e-46f1-9f2a-b51dfb4c01a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2598cf4e-b53e-46f1-9f2a-b51dfb4c01a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9dd5c053-8afd-4759-a89b-a4629ee4094a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47268","PortSpecifier":{"PortValue":47268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9dd5c053-8afd-4759-a89b-a4629ee4094a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9dd5c053-8afd-4759-a89b-a4629ee4094a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47268","PortSpecifier":{"PortValue":47268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443412,"nanos":825586255},"http":{"id":"9dd5c053-8afd-4759-a89b-a4629ee4094a","method":"GET","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9dd5c053-8afd-4759-a89b-a4629ee4094a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1F7Nr5gNU9UryqIPF_YshlrDJwVJggCivfOEQIyMAdJfKysrb8y0DTFtniVlS"}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9dd5c053-8afd-4759-a89b-a4629ee4094a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1F7Nr5gNU9UryqIPF_YshlrDJwVJggCivfOEQIyMAdJfKysrb8y0DTFtniVlS\"}"}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9dd5c053-8afd-4759-a89b-a4629ee4094a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"138e0010-8cb5-4a18-ab0e-006ba748093b","keyName":"e2e-sub-iso-58ec87","subscription":"e2e-a-only-23880f","tenant":"e2e-shared-a-9926c0","userId":"138e0010-8cb5-4a18-ab0e-006ba748093b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9dd5c053-8afd-4759-a89b-a4629ee4094a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dd5c053-8afd-4759-a89b-a4629ee4094a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dd5c053-8afd-4759-a89b-a4629ee4094a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dd5c053-8afd-4759-a89b-a4629ee4094a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/sub-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9dd5c053-8afd-4759-a89b-a4629ee4094a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dd5c053-8afd-4759-a89b-a4629ee4094a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dd5c053-8afd-4759-a89b-a4629ee4094a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dd5c053-8afd-4759-a89b-a4629ee4094a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-23880f"}
{"level":"info","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9dd5c053-8afd-4759-a89b-a4629ee4094a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9dd5c053-8afd-4759-a89b-a4629ee4094a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56804264-29df-428e-a07e-3b44cd926dad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55744","PortSpecifier":{"PortValue":55744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56804264-29df-428e-a07e-3b44cd926dad","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56804264-29df-428e-a07e-3b44cd926dad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55744","PortSpecifier":{"PortValue":55744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443412,"nanos":864020694},"http":{"id":"56804264-29df-428e-a07e-3b44cd926dad","method":"GET","headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56804264-29df-428e-a07e-3b44cd926dad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Y3RlJXgvJcSQgPk4_TZclRhN6VnOHs9j0jdHkZjs3boLTRnijMkMQQIQgPeb"}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56804264-29df-428e-a07e-3b44cd926dad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3c33bd.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Y3RlJXgvJcSQgPk4_TZclRhN6VnOHs9j0jdHkZjs3boLTRnijMkMQQIQgPeb\"}"}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56804264-29df-428e-a07e-3b44cd926dad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3c33bd.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"113171a4-b4bb-419a-8a33-bdc2605d4016","keyName":"e2e-sub-iso-67b7a4","subscription":"e2e-b-only-23880f","tenant":"e2e-shared-b-3c33bd","userId":"113171a4-b4bb-419a-8a33-bdc2605d4016","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56804264-29df-428e-a07e-3b44cd926dad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56804264-29df-428e-a07e-3b44cd926dad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56804264-29df-428e-a07e-3b44cd926dad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56804264-29df-428e-a07e-3b44cd926dad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c33bd/sub-test-model-3c33bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56804264-29df-428e-a07e-3b44cd926dad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"56804264-29df-428e-a07e-3b44cd926dad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56804264-29df-428e-a07e-3b44cd926dad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-23880f"}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56804264-29df-428e-a07e-3b44cd926dad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56804264-29df-428e-a07e-3b44cd926dad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56804264-29df-428e-a07e-3b44cd926dad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de298e55-90b4-417d-8e11-7e015807eb83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40626","PortSpecifier":{"PortValue":40626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de298e55-90b4-417d-8e11-7e015807eb83","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de298e55-90b4-417d-8e11-7e015807eb83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40626","PortSpecifier":{"PortValue":40626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443427,"nanos":111350341},"http":{"id":"de298e55-90b4-417d-8e11-7e015807eb83","method":"POST","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"de298e55-90b4-417d-8e11-7e015807eb83","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de298e55-90b4-417d-8e11-7e015807eb83","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de298e55-90b4-417d-8e11-7e015807eb83","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de298e55-90b4-417d-8e11-7e015807eb83","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de298e55-90b4-417d-8e11-7e015807eb83","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de298e55-90b4-417d-8e11-7e015807eb83","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/sub-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"de298e55-90b4-417d-8e11-7e015807eb83","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de298e55-90b4-417d-8e11-7e015807eb83","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de298e55-90b4-417d-8e11-7e015807eb83","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de298e55-90b4-417d-8e11-7e015807eb83","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de298e55-90b4-417d-8e11-7e015807eb83","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82ac6629-5c8d-4bd1-9a4f-fd1759ced945","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48092","PortSpecifier":{"PortValue":48092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82ac6629-5c8d-4bd1-9a4f-fd1759ced945","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82ac6629-5c8d-4bd1-9a4f-fd1759ced945","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48092","PortSpecifier":{"PortValue":48092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443427,"nanos":150210709},"http":{"id":"82ac6629-5c8d-4bd1-9a4f-fd1759ced945","method":"POST","headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82ac6629-5c8d-4bd1-9a4f-fd1759ced945","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82ac6629-5c8d-4bd1-9a4f-fd1759ced945","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82ac6629-5c8d-4bd1-9a4f-fd1759ced945","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82ac6629-5c8d-4bd1-9a4f-fd1759ced945","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82ac6629-5c8d-4bd1-9a4f-fd1759ced945","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82ac6629-5c8d-4bd1-9a4f-fd1759ced945","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c33bd/sub-test-model-3c33bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"82ac6629-5c8d-4bd1-9a4f-fd1759ced945","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82ac6629-5c8d-4bd1-9a4f-fd1759ced945","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82ac6629-5c8d-4bd1-9a4f-fd1759ced945","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82ac6629-5c8d-4bd1-9a4f-fd1759ced945","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82ac6629-5c8d-4bd1-9a4f-fd1759ced945","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf50ec5d-7a76-4c96-9c5e-7ac2f971a55a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40640","PortSpecifier":{"PortValue":40640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf50ec5d-7a76-4c96-9c5e-7ac2f971a55a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf50ec5d-7a76-4c96-9c5e-7ac2f971a55a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40640","PortSpecifier":{"PortValue":40640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443427,"nanos":196013498},"http":{"id":"bf50ec5d-7a76-4c96-9c5e-7ac2f971a55a","method":"POST","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf50ec5d-7a76-4c96-9c5e-7ac2f971a55a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-seod0oaRDB9zYskR_9VysfLoJZdz3gT5lgZUHOHRq2BMxK4qHyWi59GC96gM"}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf50ec5d-7a76-4c96-9c5e-7ac2f971a55a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-seod0oaRDB9zYskR_9VysfLoJZdz3gT5lgZUHOHRq2BMxK4qHyWi59GC96gM\"}"}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf50ec5d-7a76-4c96-9c5e-7ac2f971a55a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0a3ea83b-c8c3-4d85-938b-f3e928f31ade","keyName":"e2e-sub-iso-11b42b","subscription":"e2e-shared-sub-ebf110","tenant":"e2e-shared-a-9926c0","userId":"0a3ea83b-c8c3-4d85-938b-f3e928f31ade","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf50ec5d-7a76-4c96-9c5e-7ac2f971a55a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf50ec5d-7a76-4c96-9c5e-7ac2f971a55a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf50ec5d-7a76-4c96-9c5e-7ac2f971a55a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf50ec5d-7a76-4c96-9c5e-7ac2f971a55a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/sub-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf50ec5d-7a76-4c96-9c5e-7ac2f971a55a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf50ec5d-7a76-4c96-9c5e-7ac2f971a55a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf50ec5d-7a76-4c96-9c5e-7ac2f971a55a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ebf110"}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf50ec5d-7a76-4c96-9c5e-7ac2f971a55a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf50ec5d-7a76-4c96-9c5e-7ac2f971a55a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf50ec5d-7a76-4c96-9c5e-7ac2f971a55a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6400c9a3-309d-4b9b-a288-183f782c1f88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48098","PortSpecifier":{"PortValue":48098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6400c9a3-309d-4b9b-a288-183f782c1f88","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6400c9a3-309d-4b9b-a288-183f782c1f88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48098","PortSpecifier":{"PortValue":48098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443427,"nanos":226885837},"http":{"id":"6400c9a3-309d-4b9b-a288-183f782c1f88","method":"POST","headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6400c9a3-309d-4b9b-a288-183f782c1f88","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-d1fjlqlbHm8YEo4L_HhonQo1qRXSkfp82jSM0k21jUPVezDL1LQCegpIBA3o"}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6400c9a3-309d-4b9b-a288-183f782c1f88","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3c33bd.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-d1fjlqlbHm8YEo4L_HhonQo1qRXSkfp82jSM0k21jUPVezDL1LQCegpIBA3o\"}"}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6400c9a3-309d-4b9b-a288-183f782c1f88","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3c33bd.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df60c6a4-2484-4325-9698-63a73b13ebea","keyName":"e2e-sub-iso-b52fef","subscription":"e2e-shared-sub-ebf110","tenant":"e2e-shared-b-3c33bd","userId":"df60c6a4-2484-4325-9698-63a73b13ebea","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6400c9a3-309d-4b9b-a288-183f782c1f88","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6400c9a3-309d-4b9b-a288-183f782c1f88","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6400c9a3-309d-4b9b-a288-183f782c1f88","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6400c9a3-309d-4b9b-a288-183f782c1f88","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c33bd/sub-test-model-3c33bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6400c9a3-309d-4b9b-a288-183f782c1f88","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6400c9a3-309d-4b9b-a288-183f782c1f88","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ebf110"}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6400c9a3-309d-4b9b-a288-183f782c1f88","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6400c9a3-309d-4b9b-a288-183f782c1f88","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6400c9a3-309d-4b9b-a288-183f782c1f88","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:57:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6400c9a3-309d-4b9b-a288-183f782c1f88","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa"}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa"}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa"}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa"}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa"}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa"}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa"}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528"}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2868f3ad54138ca7707e854f3b5069dfb9b6355ed69ccdaeeea90a5411990b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2868f3ad54138ca7707e854f3b5069dfb9b6355ed69ccdaeeea90a5411990b5c"}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2868f3ad54138ca7707e854f3b5069dfb9b6355ed69ccdaeeea90a5411990b5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2868f3ad54138ca7707e854f3b5069dfb9b6355ed69ccdaeeea90a5411990b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2868f3ad54138ca7707e854f3b5069dfb9b6355ed69ccdaeeea90a5411990b5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528"}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2868f3ad54138ca7707e854f3b5069dfb9b6355ed69ccdaeeea90a5411990b5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2868f3ad54138ca7707e854f3b5069dfb9b6355ed69ccdaeeea90a5411990b5c"}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2868f3ad54138ca7707e854f3b5069dfb9b6355ed69ccdaeeea90a5411990b5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bd19b261033666fd5489dcc441342e7a813ce22902500d3b51f76d0226c21a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bd19b261033666fd5489dcc441342e7a813ce22902500d3b51f76d0226c21a"}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bd19b261033666fd5489dcc441342e7a813ce22902500d3b51f76d0226c21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bd19b261033666fd5489dcc441342e7a813ce22902500d3b51f76d0226c21a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3bd19b261033666fd5489dcc441342e7a813ce22902500d3b51f76d0226c21a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2868f3ad54138ca7707e854f3b5069dfb9b6355ed69ccdaeeea90a5411990b5c"}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bd19b261033666fd5489dcc441342e7a813ce22902500d3b51f76d0226c21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bd19b261033666fd5489dcc441342e7a813ce22902500d3b51f76d0226c21a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528"}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"}
{"level":"info","ts":"2026-07-07T16:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bd19b261033666fd5489dcc441342e7a813ce22902500d3b51f76d0226c21a"}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24"}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24"}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24"}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24"}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24"}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfb5217a4f982e32db92f6bbccba503c777188c9f4e9ffa464af7a83e5430be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfb5217a4f982e32db92f6bbccba503c777188c9f4e9ffa464af7a83e5430be9"}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfb5217a4f982e32db92f6bbccba503c777188c9f4e9ffa464af7a83e5430be9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfb5217a4f982e32db92f6bbccba503c777188c9f4e9ffa464af7a83e5430be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfb5217a4f982e32db92f6bbccba503c777188c9f4e9ffa464af7a83e5430be9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfb5217a4f982e32db92f6bbccba503c777188c9f4e9ffa464af7a83e5430be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfb5217a4f982e32db92f6bbccba503c777188c9f4e9ffa464af7a83e5430be9"}
{"level":"error","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bfb5217a4f982e32db92f6bbccba503c777188c9f4e9ffa464af7a83e5430be9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bfb5217a4f982e32db92f6bbccba503c777188c9f4e9ffa464af7a83e5430be9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfb5217a4f982e32db92f6bbccba503c777188c9f4e9ffa464af7a83e5430be9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfb5217a4f982e32db92f6bbccba503c777188c9f4e9ffa464af7a83e5430be9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfb5217a4f982e32db92f6bbccba503c777188c9f4e9ffa464af7a83e5430be9"}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4f037e31c21e4b50cbc0acb3412e7ae0cae36e5903ee513b6e8f5ccb375aab1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4f037e31c21e4b50cbc0acb3412e7ae0cae36e5903ee513b6e8f5ccb375aab1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4f037e31c21e4b50cbc0acb3412e7ae0cae36e5903ee513b6e8f5ccb375aab1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4f037e31c21e4b50cbc0acb3412e7ae0cae36e5903ee513b6e8f5ccb375aab1"}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4f037e31c21e4b50cbc0acb3412e7ae0cae36e5903ee513b6e8f5ccb375aab1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfb5217a4f982e32db92f6bbccba503c777188c9f4e9ffa464af7a83e5430be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfb5217a4f982e32db92f6bbccba503c777188c9f4e9ffa464af7a83e5430be9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4f037e31c21e4b50cbc0acb3412e7ae0cae36e5903ee513b6e8f5ccb375aab1"}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfb5217a4f982e32db92f6bbccba503c777188c9f4e9ffa464af7a83e5430be9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4f037e31c21e4b50cbc0acb3412e7ae0cae36e5903ee513b6e8f5ccb375aab1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfb5217a4f982e32db92f6bbccba503c777188c9f4e9ffa464af7a83e5430be9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4f037e31c21e4b50cbc0acb3412e7ae0cae36e5903ee513b6e8f5ccb375aab1"}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4f037e31c21e4b50cbc0acb3412e7ae0cae36e5903ee513b6e8f5ccb375aab1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4f037e31c21e4b50cbc0acb3412e7ae0cae36e5903ee513b6e8f5ccb375aab1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfb5217a4f982e32db92f6bbccba503c777188c9f4e9ffa464af7a83e5430be9"}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4f037e31c21e4b50cbc0acb3412e7ae0cae36e5903ee513b6e8f5ccb375aab1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4f037e31c21e4b50cbc0acb3412e7ae0cae36e5903ee513b6e8f5ccb375aab1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4f037e31c21e4b50cbc0acb3412e7ae0cae36e5903ee513b6e8f5ccb375aab1"}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c33bd5b4f6eac7b3e58409e473133830c18550408afbd94bcb0d07505d06182"}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1a1781cf3327e7b267556076e32c0a9fe106936eb99c39e24fb8d37a4e9288b"}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9503117eb3632ab91af13d14c0e1894b114a904a25541c892afb4c78d76b40e"}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0ec0d8e28170929fc846ddf88bafa66fb606d8de0aa9d58ddbce1f3fabe31aa"}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65ae0dc7a8cb4f95712377ca3c91f1a9bfa37676a0520cf84d0f77bac00aa6b8"}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81b1ebd2d7e2279eb239fad6de78584dc50c93218e00fbdf83ef0437a44cf251"}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/652ba9fd4de8261cd3636b1900cdf942e8bc709334e4e8521727bf89e266eb27"}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f684c2c8ac73a5dae95427b0b44ab8c558df4819cc211d1f2e5556ecb2423612"}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85d47385a3a51c3e767935546c2cf9ba9135418fad1645d081acc747f9a0d3ca"}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64c0f3e213c88c9d664b42217f0bfbf7aba1c8c225b6fc65309cb9fcd59efd51"}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64aad6ea3ea36d6c5c7a69db6459f1cdedec331ed5bbfd8780933cc524f72abe"}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d640fa469a26897f4105e1df1b6045d1cd8ab075d702a7a165f47fc9d970ec7"}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a406fac241a74658e86abe4d3459916c1530996b012813075de8a782654fdb36"}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/253dc8e73fb9da2cfc2f4fa7fe0b0355e9fb37483aa53cf34a84e1c1378b8dc4"}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f74966b59d11c1023cb53f48275de67625c9e31d0b782d39ff7f98e625452332"}
{"level":"info","ts":"2026-07-07T16:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bea48a26e6a13c290ee5e23e406b310309b380c7023ccb67fbde33e0668acb0"}
{"level":"debug","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e"}
{"level":"debug","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e"}
{"level":"debug","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e"}
{"level":"debug","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e"}
{"level":"debug","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e"}
{"level":"debug","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e"}
{"level":"debug","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e"}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d"}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d"}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837"}
{"level":"error","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a"}
{"level":"error","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed"}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed"}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6129ac10ac01fdfa9ecd81a7bbca38001d925933d2a5279be3543ea7c66014","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6129ac10ac01fdfa9ecd81a7bbca38001d925933d2a5279be3543ea7c66014","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6129ac10ac01fdfa9ecd81a7bbca38001d925933d2a5279be3543ea7c66014"}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6129ac10ac01fdfa9ecd81a7bbca38001d925933d2a5279be3543ea7c66014","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a6129ac10ac01fdfa9ecd81a7bbca38001d925933d2a5279be3543ea7c66014"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6129ac10ac01fdfa9ecd81a7bbca38001d925933d2a5279be3543ea7c66014","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6129ac10ac01fdfa9ecd81a7bbca38001d925933d2a5279be3543ea7c66014"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6129ac10ac01fdfa9ecd81a7bbca38001d925933d2a5279be3543ea7c66014","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6129ac10ac01fdfa9ecd81a7bbca38001d925933d2a5279be3543ea7c66014"}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b"}
{"level":"error","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b"}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:57:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b"}
{"level":"debug","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528"}
{"level":"debug","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528"}
{"level":"debug","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528"}
{"level":"debug","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24"}
{"level":"debug","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24"}
{"level":"debug","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d"}
{"level":"debug","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d"}
{"level":"debug","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24"}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d"}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a"}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24"}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d"}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a"}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24"}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d"}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a"}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51"}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51"}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e"}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51"}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e"}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bd19b261033666fd5489dcc441342e7a813ce22902500d3b51f76d0226c21a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bd19b261033666fd5489dcc441342e7a813ce22902500d3b51f76d0226c21a"}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2868f3ad54138ca7707e854f3b5069dfb9b6355ed69ccdaeeea90a5411990b5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfb5217a4f982e32db92f6bbccba503c777188c9f4e9ffa464af7a83e5430be9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2868f3ad54138ca7707e854f3b5069dfb9b6355ed69ccdaeeea90a5411990b5c"}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfb5217a4f982e32db92f6bbccba503c777188c9f4e9ffa464af7a83e5430be9"}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4f037e31c21e4b50cbc0acb3412e7ae0cae36e5903ee513b6e8f5ccb375aab1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b"}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4f037e31c21e4b50cbc0acb3412e7ae0cae36e5903ee513b6e8f5ccb375aab1"}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa"}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6129ac10ac01fdfa9ecd81a7bbca38001d925933d2a5279be3543ea7c66014","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed"}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319"}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6129ac10ac01fdfa9ecd81a7bbca38001d925933d2a5279be3543ea7c66014"}
{"level":"info","ts":"2026-07-07T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837"}
{"level":"info","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86e4f9fe-5c2d-44bf-bc31-3f6a7a60ef95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56028","PortSpecifier":{"PortValue":56028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86e4f9fe-5c2d-44bf-bc31-3f6a7a60ef95","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86e4f9fe-5c2d-44bf-bc31-3f6a7a60ef95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56028","PortSpecifier":{"PortValue":56028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443513,"nanos":577470048},"http":{"id":"86e4f9fe-5c2d-44bf-bc31-3f6a7a60ef95","method":"POST","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"86e4f9fe-5c2d-44bf-bc31-3f6a7a60ef95","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86e4f9fe-5c2d-44bf-bc31-3f6a7a60ef95","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86e4f9fe-5c2d-44bf-bc31-3f6a7a60ef95","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86e4f9fe-5c2d-44bf-bc31-3f6a7a60ef95","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86e4f9fe-5c2d-44bf-bc31-3f6a7a60ef95","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86e4f9fe-5c2d-44bf-bc31-3f6a7a60ef95","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86e4f9fe-5c2d-44bf-bc31-3f6a7a60ef95","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86e4f9fe-5c2d-44bf-bc31-3f6a7a60ef95","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86e4f9fe-5c2d-44bf-bc31-3f6a7a60ef95","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86e4f9fe-5c2d-44bf-bc31-3f6a7a60ef95","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86e4f9fe-5c2d-44bf-bc31-3f6a7a60ef95","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"955c5b7e-a9bc-4404-99ba-a1dc45a49f63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49212","PortSpecifier":{"PortValue":49212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"955c5b7e-a9bc-4404-99ba-a1dc45a49f63","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"955c5b7e-a9bc-4404-99ba-a1dc45a49f63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49212","PortSpecifier":{"PortValue":49212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443513,"nanos":615470407},"http":{"id":"955c5b7e-a9bc-4404-99ba-a1dc45a49f63","method":"POST","headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"955c5b7e-a9bc-4404-99ba-a1dc45a49f63","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"955c5b7e-a9bc-4404-99ba-a1dc45a49f63","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"955c5b7e-a9bc-4404-99ba-a1dc45a49f63","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"955c5b7e-a9bc-4404-99ba-a1dc45a49f63","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"955c5b7e-a9bc-4404-99ba-a1dc45a49f63","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"955c5b7e-a9bc-4404-99ba-a1dc45a49f63","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c33bd/rate-test-model-3c33bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"955c5b7e-a9bc-4404-99ba-a1dc45a49f63","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"955c5b7e-a9bc-4404-99ba-a1dc45a49f63","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"955c5b7e-a9bc-4404-99ba-a1dc45a49f63","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"955c5b7e-a9bc-4404-99ba-a1dc45a49f63","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"955c5b7e-a9bc-4404-99ba-a1dc45a49f63","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a288a22-71e8-4ebc-9fb7-7c3e9aff4ff0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56030","PortSpecifier":{"PortValue":56030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a288a22-71e8-4ebc-9fb7-7c3e9aff4ff0","method":"POST","path":"/ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0/v1/completions","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a288a22-71e8-4ebc-9fb7-7c3e9aff4ff0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56030","PortSpecifier":{"PortValue":56030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443513,"nanos":656509031},"http":{"id":"9a288a22-71e8-4ebc-9fb7-7c3e9aff4ff0","method":"POST","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a288a22-71e8-4ebc-9fb7-7c3e9aff4ff0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1etfvc68iznd2Kl0x_bigmARUOaDZQamm5qkAiKAxGV6bawiljX4tIo3XGjr0"}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a288a22-71e8-4ebc-9fb7-7c3e9aff4ff0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1etfvc68iznd2Kl0x_bigmARUOaDZQamm5qkAiKAxGV6bawiljX4tIo3XGjr0\"}"}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a288a22-71e8-4ebc-9fb7-7c3e9aff4ff0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d739bbdd-10bc-4606-b9d9-d970b5c564ca","keyName":"e2e-rate-a-5bb55f","subscription":"e2e-rate-iso-a-5bb55f","tenant":"e2e-shared-a-9926c0","userId":"d739bbdd-10bc-4606-b9d9-d970b5c564ca","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a288a22-71e8-4ebc-9fb7-7c3e9aff4ff0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0\",\"requestedSubscription\":\"e2e-rate-iso-a-5bb55f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a288a22-71e8-4ebc-9fb7-7c3e9aff4ff0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9926c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5bb55f","namespace":"ai-tenant-e2e-shared-a-9926c0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a288a22-71e8-4ebc-9fb7-7c3e9aff4ff0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a288a22-71e8-4ebc-9fb7-7c3e9aff4ff0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a288a22-71e8-4ebc-9fb7-7c3e9aff4ff0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a288a22-71e8-4ebc-9fb7-7c3e9aff4ff0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a288a22-71e8-4ebc-9fb7-7c3e9aff4ff0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a288a22-71e8-4ebc-9fb7-7c3e9aff4ff0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a288a22-71e8-4ebc-9fb7-7c3e9aff4ff0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5bb55f"}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a288a22-71e8-4ebc-9fb7-7c3e9aff4ff0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a288a22-71e8-4ebc-9fb7-7c3e9aff4ff0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d739bbdd-10bc-4606-b9d9-d970b5c564ca","keyName":"e2e-rate-a-5bb55f","selected_subscription":"e2e-rate-iso-a-5bb55f","selected_subscription_key":"ai-tenant-e2e-shared-a-9926c0/e2e-rate-iso-a-5bb55f@ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9926c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5bb55f","namespace":"ai-tenant-e2e-shared-a-9926c0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a288a22-71e8-4ebc-9fb7-7c3e9aff4ff0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a288a22-71e8-4ebc-9fb7-7c3e9aff4ff0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:58:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a75d0f14-a18c-41b8-9a51-898a87398b12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56034","PortSpecifier":{"PortValue":56034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a75d0f14-a18c-41b8-9a51-898a87398b12","method":"POST","path":"/ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0/v1/completions","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:58:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a75d0f14-a18c-41b8-9a51-898a87398b12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56034","PortSpecifier":{"PortValue":56034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443514,"nanos":715375082},"http":{"id":"a75d0f14-a18c-41b8-9a51-898a87398b12","method":"POST","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a75d0f14-a18c-41b8-9a51-898a87398b12","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1etfvc68iznd2Kl0x_bigmARUOaDZQamm5qkAiKAxGV6bawiljX4tIo3XGjr0"}
{"level":"debug","ts":"2026-07-07T16:58:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a75d0f14-a18c-41b8-9a51-898a87398b12","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1etfvc68iznd2Kl0x_bigmARUOaDZQamm5qkAiKAxGV6bawiljX4tIo3XGjr0\"}"}
{"level":"debug","ts":"2026-07-07T16:58:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a75d0f14-a18c-41b8-9a51-898a87398b12","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d739bbdd-10bc-4606-b9d9-d970b5c564ca","keyName":"e2e-rate-a-5bb55f","subscription":"e2e-rate-iso-a-5bb55f","tenant":"e2e-shared-a-9926c0","userId":"d739bbdd-10bc-4606-b9d9-d970b5c564ca","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:58:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a75d0f14-a18c-41b8-9a51-898a87398b12","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0\",\"requestedSubscription\":\"e2e-rate-iso-a-5bb55f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:58:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a75d0f14-a18c-41b8-9a51-898a87398b12","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9926c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5bb55f","namespace":"ai-tenant-e2e-shared-a-9926c0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:58:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a75d0f14-a18c-41b8-9a51-898a87398b12","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a75d0f14-a18c-41b8-9a51-898a87398b12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a75d0f14-a18c-41b8-9a51-898a87398b12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a75d0f14-a18c-41b8-9a51-898a87398b12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a75d0f14-a18c-41b8-9a51-898a87398b12","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a75d0f14-a18c-41b8-9a51-898a87398b12","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:58:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a75d0f14-a18c-41b8-9a51-898a87398b12","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5bb55f"}
{"level":"debug","ts":"2026-07-07T16:58:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a75d0f14-a18c-41b8-9a51-898a87398b12","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:58:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a75d0f14-a18c-41b8-9a51-898a87398b12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d739bbdd-10bc-4606-b9d9-d970b5c564ca","keyName":"e2e-rate-a-5bb55f","selected_subscription":"e2e-rate-iso-a-5bb55f","selected_subscription_key":"ai-tenant-e2e-shared-a-9926c0/e2e-rate-iso-a-5bb55f@ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9926c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5bb55f","namespace":"ai-tenant-e2e-shared-a-9926c0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:58:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a75d0f14-a18c-41b8-9a51-898a87398b12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:58:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a75d0f14-a18c-41b8-9a51-898a87398b12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:58:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4e06ef3-9429-4dec-8023-61863360b5aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56048","PortSpecifier":{"PortValue":56048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4e06ef3-9429-4dec-8023-61863360b5aa","method":"POST","path":"/ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0/v1/completions","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:58:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4e06ef3-9429-4dec-8023-61863360b5aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56048","PortSpecifier":{"PortValue":56048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443515,"nanos":750103386},"http":{"id":"f4e06ef3-9429-4dec-8023-61863360b5aa","method":"POST","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4e06ef3-9429-4dec-8023-61863360b5aa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1etfvc68iznd2Kl0x_bigmARUOaDZQamm5qkAiKAxGV6bawiljX4tIo3XGjr0"}
{"level":"debug","ts":"2026-07-07T16:58:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4e06ef3-9429-4dec-8023-61863360b5aa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1etfvc68iznd2Kl0x_bigmARUOaDZQamm5qkAiKAxGV6bawiljX4tIo3XGjr0\"}"}
{"level":"debug","ts":"2026-07-07T16:58:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4e06ef3-9429-4dec-8023-61863360b5aa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d739bbdd-10bc-4606-b9d9-d970b5c564ca","keyName":"e2e-rate-a-5bb55f","subscription":"e2e-rate-iso-a-5bb55f","tenant":"e2e-shared-a-9926c0","userId":"d739bbdd-10bc-4606-b9d9-d970b5c564ca","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:58:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4e06ef3-9429-4dec-8023-61863360b5aa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0\",\"requestedSubscription\":\"e2e-rate-iso-a-5bb55f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:58:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4e06ef3-9429-4dec-8023-61863360b5aa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9926c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5bb55f","namespace":"ai-tenant-e2e-shared-a-9926c0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:58:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4e06ef3-9429-4dec-8023-61863360b5aa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4e06ef3-9429-4dec-8023-61863360b5aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4e06ef3-9429-4dec-8023-61863360b5aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4e06ef3-9429-4dec-8023-61863360b5aa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4e06ef3-9429-4dec-8023-61863360b5aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4e06ef3-9429-4dec-8023-61863360b5aa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:58:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4e06ef3-9429-4dec-8023-61863360b5aa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:58:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4e06ef3-9429-4dec-8023-61863360b5aa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5bb55f"}
{"level":"debug","ts":"2026-07-07T16:58:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4e06ef3-9429-4dec-8023-61863360b5aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d739bbdd-10bc-4606-b9d9-d970b5c564ca","keyName":"e2e-rate-a-5bb55f","selected_subscription":"e2e-rate-iso-a-5bb55f","selected_subscription_key":"ai-tenant-e2e-shared-a-9926c0/e2e-rate-iso-a-5bb55f@ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9926c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5bb55f","namespace":"ai-tenant-e2e-shared-a-9926c0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:58:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4e06ef3-9429-4dec-8023-61863360b5aa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:58:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4e06ef3-9429-4dec-8023-61863360b5aa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2ab4a24-5f2b-434d-b79f-83b3e34d7277","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:33116","PortSpecifier":{"PortValue":33116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2ab4a24-5f2b-434d-b79f-83b3e34d7277","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2ab4a24-5f2b-434d-b79f-83b3e34d7277","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:33116","PortSpecifier":{"PortValue":33116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443526,"nanos":613001052},"http":{"id":"f2ab4a24-5f2b-434d-b79f-83b3e34d7277","method":"POST","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f2ab4a24-5f2b-434d-b79f-83b3e34d7277","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2ab4a24-5f2b-434d-b79f-83b3e34d7277","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2ab4a24-5f2b-434d-b79f-83b3e34d7277","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2ab4a24-5f2b-434d-b79f-83b3e34d7277","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2ab4a24-5f2b-434d-b79f-83b3e34d7277","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2ab4a24-5f2b-434d-b79f-83b3e34d7277","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f2ab4a24-5f2b-434d-b79f-83b3e34d7277","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2ab4a24-5f2b-434d-b79f-83b3e34d7277","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2ab4a24-5f2b-434d-b79f-83b3e34d7277","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2ab4a24-5f2b-434d-b79f-83b3e34d7277","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2ab4a24-5f2b-434d-b79f-83b3e34d7277","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e357f19-af51-46ea-8fdd-8b652ee57792","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:35332","PortSpecifier":{"PortValue":35332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e357f19-af51-46ea-8fdd-8b652ee57792","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e357f19-af51-46ea-8fdd-8b652ee57792","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:35332","PortSpecifier":{"PortValue":35332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443526,"nanos":650316999},"http":{"id":"0e357f19-af51-46ea-8fdd-8b652ee57792","method":"POST","headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e357f19-af51-46ea-8fdd-8b652ee57792","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e357f19-af51-46ea-8fdd-8b652ee57792","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"]}}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e357f19-af51-46ea-8fdd-8b652ee57792","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f650ae1f5663"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=17bb7522-6ef4-400e-9a63-d43d7a3a673f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9bdf78ec-5259-415f-baeb-c9f89155483e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e357f19-af51-46ea-8fdd-8b652ee57792","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e357f19-af51-46ea-8fdd-8b652ee57792","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e357f19-af51-46ea-8fdd-8b652ee57792","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c33bd/rate-test-model-3c33bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e357f19-af51-46ea-8fdd-8b652ee57792","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e357f19-af51-46ea-8fdd-8b652ee57792","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e357f19-af51-46ea-8fdd-8b652ee57792","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e357f19-af51-46ea-8fdd-8b652ee57792","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e357f19-af51-46ea-8fdd-8b652ee57792","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6aca7873-91c2-472f-90d7-006d15cb3075","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:33120","PortSpecifier":{"PortValue":33120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6aca7873-91c2-472f-90d7-006d15cb3075","method":"POST","path":"/ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0/v1/completions","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6aca7873-91c2-472f-90d7-006d15cb3075","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:33120","PortSpecifier":{"PortValue":33120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443526,"nanos":684028146},"http":{"id":"6aca7873-91c2-472f-90d7-006d15cb3075","method":"POST","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6aca7873-91c2-472f-90d7-006d15cb3075","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sqPV3Zo2hjlOxdZZ_SxduelzdOEOScC7gpZSsbGwg6lh1FVxRhod6zttawEV"}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6aca7873-91c2-472f-90d7-006d15cb3075","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sqPV3Zo2hjlOxdZZ_SxduelzdOEOScC7gpZSsbGwg6lh1FVxRhod6zttawEV\"}"}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6aca7873-91c2-472f-90d7-006d15cb3075","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1a0fd363-7227-4c9a-a2a0-fee3b3d6c536","keyName":"e2e-rate-a-90704a","subscription":"e2e-rate-iso-a-90704a","tenant":"e2e-shared-a-9926c0","userId":"1a0fd363-7227-4c9a-a2a0-fee3b3d6c536","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6aca7873-91c2-472f-90d7-006d15cb3075","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0\",\"requestedSubscription\":\"e2e-rate-iso-a-90704a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6aca7873-91c2-472f-90d7-006d15cb3075","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9926c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90704a","namespace":"ai-tenant-e2e-shared-a-9926c0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6aca7873-91c2-472f-90d7-006d15cb3075","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aca7873-91c2-472f-90d7-006d15cb3075","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aca7873-91c2-472f-90d7-006d15cb3075","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aca7873-91c2-472f-90d7-006d15cb3075","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aca7873-91c2-472f-90d7-006d15cb3075","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aca7873-91c2-472f-90d7-006d15cb3075","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aca7873-91c2-472f-90d7-006d15cb3075","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90704a"}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aca7873-91c2-472f-90d7-006d15cb3075","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aca7873-91c2-472f-90d7-006d15cb3075","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1a0fd363-7227-4c9a-a2a0-fee3b3d6c536","keyName":"e2e-rate-a-90704a","selected_subscription":"e2e-rate-iso-a-90704a","selected_subscription_key":"ai-tenant-e2e-shared-a-9926c0/e2e-rate-iso-a-90704a@ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9926c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90704a","namespace":"ai-tenant-e2e-shared-a-9926c0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6aca7873-91c2-472f-90d7-006d15cb3075","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6aca7873-91c2-472f-90d7-006d15cb3075","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:58:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87fae3fa-5a50-4fb6-89cc-7c27499e3b37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:33124","PortSpecifier":{"PortValue":33124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87fae3fa-5a50-4fb6-89cc-7c27499e3b37","method":"POST","path":"/ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0/v1/completions","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:58:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87fae3fa-5a50-4fb6-89cc-7c27499e3b37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:33124","PortSpecifier":{"PortValue":33124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443527,"nanos":722692772},"http":{"id":"87fae3fa-5a50-4fb6-89cc-7c27499e3b37","method":"POST","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87fae3fa-5a50-4fb6-89cc-7c27499e3b37","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sqPV3Zo2hjlOxdZZ_SxduelzdOEOScC7gpZSsbGwg6lh1FVxRhod6zttawEV"}
{"level":"debug","ts":"2026-07-07T16:58:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87fae3fa-5a50-4fb6-89cc-7c27499e3b37","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sqPV3Zo2hjlOxdZZ_SxduelzdOEOScC7gpZSsbGwg6lh1FVxRhod6zttawEV\"}"}
{"level":"debug","ts":"2026-07-07T16:58:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87fae3fa-5a50-4fb6-89cc-7c27499e3b37","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1a0fd363-7227-4c9a-a2a0-fee3b3d6c536","keyName":"e2e-rate-a-90704a","subscription":"e2e-rate-iso-a-90704a","tenant":"e2e-shared-a-9926c0","userId":"1a0fd363-7227-4c9a-a2a0-fee3b3d6c536","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:58:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87fae3fa-5a50-4fb6-89cc-7c27499e3b37","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0\",\"requestedSubscription\":\"e2e-rate-iso-a-90704a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:58:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87fae3fa-5a50-4fb6-89cc-7c27499e3b37","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9926c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90704a","namespace":"ai-tenant-e2e-shared-a-9926c0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:58:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87fae3fa-5a50-4fb6-89cc-7c27499e3b37","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87fae3fa-5a50-4fb6-89cc-7c27499e3b37","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87fae3fa-5a50-4fb6-89cc-7c27499e3b37","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87fae3fa-5a50-4fb6-89cc-7c27499e3b37","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87fae3fa-5a50-4fb6-89cc-7c27499e3b37","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87fae3fa-5a50-4fb6-89cc-7c27499e3b37","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:58:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87fae3fa-5a50-4fb6-89cc-7c27499e3b37","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90704a"}
{"level":"debug","ts":"2026-07-07T16:58:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87fae3fa-5a50-4fb6-89cc-7c27499e3b37","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:58:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87fae3fa-5a50-4fb6-89cc-7c27499e3b37","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1a0fd363-7227-4c9a-a2a0-fee3b3d6c536","keyName":"e2e-rate-a-90704a","selected_subscription":"e2e-rate-iso-a-90704a","selected_subscription_key":"ai-tenant-e2e-shared-a-9926c0/e2e-rate-iso-a-90704a@ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9926c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90704a","namespace":"ai-tenant-e2e-shared-a-9926c0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:58:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87fae3fa-5a50-4fb6-89cc-7c27499e3b37","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:58:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87fae3fa-5a50-4fb6-89cc-7c27499e3b37","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d41e2eb5-f5dd-4c7a-b3da-26c0f9c43155","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:33126","PortSpecifier":{"PortValue":33126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d41e2eb5-f5dd-4c7a-b3da-26c0f9c43155","method":"POST","path":"/ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0/v1/completions","host":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d41e2eb5-f5dd-4c7a-b3da-26c0f9c43155","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:33126","PortSpecifier":{"PortValue":33126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443528,"nanos":759409845},"http":{"id":"d41e2eb5-f5dd-4c7a-b3da-26c0f9c43155","method":"POST","headers":{":authority":"e2e-shared-a-9926c0.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d41e2eb5-f5dd-4c7a-b3da-26c0f9c43155","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sqPV3Zo2hjlOxdZZ_SxduelzdOEOScC7gpZSsbGwg6lh1FVxRhod6zttawEV"}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d41e2eb5-f5dd-4c7a-b3da-26c0f9c43155","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sqPV3Zo2hjlOxdZZ_SxduelzdOEOScC7gpZSsbGwg6lh1FVxRhod6zttawEV\"}"}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d41e2eb5-f5dd-4c7a-b3da-26c0f9c43155","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1a0fd363-7227-4c9a-a2a0-fee3b3d6c536","keyName":"e2e-rate-a-90704a","subscription":"e2e-rate-iso-a-90704a","tenant":"e2e-shared-a-9926c0","userId":"1a0fd363-7227-4c9a-a2a0-fee3b3d6c536","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d41e2eb5-f5dd-4c7a-b3da-26c0f9c43155","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0\",\"requestedSubscription\":\"e2e-rate-iso-a-90704a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d41e2eb5-f5dd-4c7a-b3da-26c0f9c43155","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9926c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9926c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90704a","namespace":"ai-tenant-e2e-shared-a-9926c0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d41e2eb5-f5dd-4c7a-b3da-26c0f9c43155","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d41e2eb5-f5dd-4c7a-b3da-26c0f9c43155","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d41e2eb5-f5dd-4c7a-b3da-26c0f9c43155","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d41e2eb5-f5dd-4c7a-b3da-26c0f9c43155","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d41e2eb5-f5dd-4c7a-b3da-26c0f9c43155","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d41e2eb5-f5dd-4c7a-b3da-26c0f9c43155","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90704a"}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d41e2eb5-f5dd-4c7a-b3da-26c0f9c43155","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d41e2eb5-f5dd-4c7a-b3da-26c0f9c43155","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d41e2eb5-f5dd-4c7a-b3da-26c0f9c43155","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1a0fd363-7227-4c9a-a2a0-fee3b3d6c536","keyName":"e2e-rate-a-90704a","selected_subscription":"e2e-rate-iso-a-90704a","selected_subscription_key":"ai-tenant-e2e-shared-a-9926c0/e2e-rate-iso-a-90704a@ai-tenant-e2e-shared-a-9926c0/rate-test-model-9926c0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9926c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90704a","namespace":"ai-tenant-e2e-shared-a-9926c0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d41e2eb5-f5dd-4c7a-b3da-26c0f9c43155","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d41e2eb5-f5dd-4c7a-b3da-26c0f9c43155","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a62aba46-6c36-4ce9-9eb3-b5240a2c46d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:35336","PortSpecifier":{"PortValue":35336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a62aba46-6c36-4ce9-9eb3-b5240a2c46d1","method":"POST","path":"/ai-tenant-e2e-shared-b-3c33bd/rate-test-model-3c33bd/v1/completions","host":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a62aba46-6c36-4ce9-9eb3-b5240a2c46d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:35336","PortSpecifier":{"PortValue":35336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783443528,"nanos":791704826},"http":{"id":"a62aba46-6c36-4ce9-9eb3-b5240a2c46d1","method":"POST","headers":{":authority":"e2e-shared-b-3c33bd.apps.63aa4883-7c65-417e-ba13-f650ae1f5663.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-3c33bd/rate-test-model-3c33bd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a62aba46-6c36-4ce9-9eb3-b5240a2c46d1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-niSKRYpjP1sJlEA8_TaNZONIkM8IRE6B4Q7J21KjwdSuX3YVX9t9RAEIitid"}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a62aba46-6c36-4ce9-9eb3-b5240a2c46d1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3c33bd.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-niSKRYpjP1sJlEA8_TaNZONIkM8IRE6B4Q7J21KjwdSuX3YVX9t9RAEIitid\"}"}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a62aba46-6c36-4ce9-9eb3-b5240a2c46d1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3c33bd.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a705b79c-c394-4703-b43f-39b07f372f19","keyName":"e2e-rate-b-90704a","subscription":"e2e-rate-iso-b-90704a","tenant":"e2e-shared-b-3c33bd","userId":"a705b79c-c394-4703-b43f-39b07f372f19","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a62aba46-6c36-4ce9-9eb3-b5240a2c46d1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-3c33bd.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-3c33bd/rate-test-model-3c33bd\",\"requestedSubscription\":\"e2e-rate-iso-b-90704a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a62aba46-6c36-4ce9-9eb3-b5240a2c46d1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3c33bd.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3c33bd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-90704a","namespace":"ai-tenant-e2e-shared-b-3c33bd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a62aba46-6c36-4ce9-9eb3-b5240a2c46d1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62aba46-6c36-4ce9-9eb3-b5240a2c46d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62aba46-6c36-4ce9-9eb3-b5240a2c46d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62aba46-6c36-4ce9-9eb3-b5240a2c46d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c33bd/rate-test-model-3c33bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62aba46-6c36-4ce9-9eb3-b5240a2c46d1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62aba46-6c36-4ce9-9eb3-b5240a2c46d1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62aba46-6c36-4ce9-9eb3-b5240a2c46d1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-90704a"}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62aba46-6c36-4ce9-9eb3-b5240a2c46d1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62aba46-6c36-4ce9-9eb3-b5240a2c46d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a705b79c-c394-4703-b43f-39b07f372f19","keyName":"e2e-rate-b-90704a","selected_subscription":"e2e-rate-iso-b-90704a","selected_subscription_key":"ai-tenant-e2e-shared-b-3c33bd/e2e-rate-iso-b-90704a@ai-tenant-e2e-shared-b-3c33bd/rate-test-model-3c33bd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3c33bd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-90704a","namespace":"ai-tenant-e2e-shared-b-3c33bd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a62aba46-6c36-4ce9-9eb3-b5240a2c46d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a62aba46-6c36-4ce9-9eb3-b5240a2c46d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6996b2e60a517bd69e45ff1f8c51c15d8d2a8926ffa6b292a3cd39f6b8b59e51"}
{"level":"info","ts":"2026-07-07T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bcd46d51a522eaf5e01e66646813b8b2d4b0f79e44f03019753bd4249d5744b"}
{"level":"info","ts":"2026-07-07T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a6129ac10ac01fdfa9ecd81a7bbca38001d925933d2a5279be3543ea7c66014"}
{"level":"info","ts":"2026-07-07T16:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5915fece96461ed8e28a6e8d1baa0b458db11e02e0f7fc50ec974626ed23ef99"}
{"level":"info","ts":"2026-07-07T16:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ae6379ea37ed2189317677ac6def0a16dba6c809c89cc2a77aa4ee32a65ff5e"}
{"level":"info","ts":"2026-07-07T16:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4f037e31c21e4b50cbc0acb3412e7ae0cae36e5903ee513b6e8f5ccb375aab1"}
{"level":"info","ts":"2026-07-07T16:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36fa1561c3ed03f0d8a06bb17fdc6853fa968b9e544e349d3337b04b77acb528"}
{"level":"info","ts":"2026-07-07T16:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3bd19b261033666fd5489dcc441342e7a813ce22902500d3b51f76d0226c21a"}
{"level":"info","ts":"2026-07-07T16:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9965c7784ee967ef2c5c220f7c754f45ca4aa6ee74ff24b4d5c256051dd4e7aa"}
{"level":"info","ts":"2026-07-07T16:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcefc20c9d4ad0c099791ea120517c21418d2dba5099ab94cd56456b58c66d24"}
{"level":"info","ts":"2026-07-07T16:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d301d4029c0b132f42644715dbb3592b1a160d1edd646497fb8914bed40fcb6a"}
{"level":"info","ts":"2026-07-07T16:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9530c8bf687a8e3b94c3a94ded2b052cf5eb5ceb338bb9053b8ebaceaa7d31d"}
{"level":"info","ts":"2026-07-07T16:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4899f59928dc1b50878c68417520716845b151cb2fc03ea6cce6b853b0a9b7ed"}
{"level":"info","ts":"2026-07-07T16:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5ad5072f012b892c5e2e2095a67f0ac382fd7824c2c7377c6eabc72ad71d837"}
{"level":"info","ts":"2026-07-07T16:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6094019eefe6e3f4d635fc19097677782dfd2ad3421f1e862aa96f38fe5dd319"}
{"level":"info","ts":"2026-07-07T16:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a718e29d07d758fab60539eca3dd5d3ca37593e8d8d582a6c0c55e822bcf3526"}
{"level":"info","ts":"2026-07-07T16:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2868f3ad54138ca7707e854f3b5069dfb9b6355ed69ccdaeeea90a5411990b5c"}
{"level":"info","ts":"2026-07-07T16:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfb5217a4f982e32db92f6bbccba503c777188c9f4e9ffa464af7a83e5430be9"}
{"level":"info","ts":"2026-07-07T16:59:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8a666c1f6bf579ee2ad263b57869490b13635655e1eb6304e369830bed55a76"}
{"level":"info","ts":"2026-07-07T16:59:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fd4c65207ef9f6eaf4059f5d8ac8500d81232d1015ad4d7a2d333a77da1ec9d"}