--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"73854f2a-d3ea-4256-b55a-ff71294a50ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73854f2a-d3ea-4256-b55a-ff71294a50ec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73854f2a-d3ea-4256-b55a-ff71294a50ec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73854f2a-d3ea-4256-b55a-ff71294a50ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73854f2a-d3ea-4256-b55a-ff71294a50ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f454354a-e8d5-4df9-a199-40b74e99dfea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59664","PortSpecifier":{"PortValue":59664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f454354a-e8d5-4df9-a199-40b74e99dfea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f454354a-e8d5-4df9-a199-40b74e99dfea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59664","PortSpecifier":{"PortValue":59664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730509,"nanos":565473732},"http":{"id":"f454354a-e8d5-4df9-a199-40b74e99dfea","method":"POST","headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f454354a-e8d5-4df9-a199-40b74e99dfea","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f454354a-e8d5-4df9-a199-40b74e99dfea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f454354a-e8d5-4df9-a199-40b74e99dfea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f454354a-e8d5-4df9-a199-40b74e99dfea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f454354a-e8d5-4df9-a199-40b74e99dfea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f454354a-e8d5-4df9-a199-40b74e99dfea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0b3df/auth-test-model-f0b3df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0b3df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f454354a-e8d5-4df9-a199-40b74e99dfea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f454354a-e8d5-4df9-a199-40b74e99dfea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f454354a-e8d5-4df9-a199-40b74e99dfea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f454354a-e8d5-4df9-a199-40b74e99dfea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f454354a-e8d5-4df9-a199-40b74e99dfea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0df32d27-c998-45d5-b1ec-106e7c8520a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43124","PortSpecifier":{"PortValue":43124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0df32d27-c998-45d5-b1ec-106e7c8520a2","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0df32d27-c998-45d5-b1ec-106e7c8520a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43124","PortSpecifier":{"PortValue":43124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730509,"nanos":606526913},"http":{"id":"0df32d27-c998-45d5-b1ec-106e7c8520a2","method":"GET","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0df32d27-c998-45d5-b1ec-106e7c8520a2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8MgTB9mQXPvLGZH0_VY6fEpy2QVfJyRxMF2kBessG8aI0LYxt00ii4AlBhjY"}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0df32d27-c998-45d5-b1ec-106e7c8520a2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8MgTB9mQXPvLGZH0_VY6fEpy2QVfJyRxMF2kBessG8aI0LYxt00ii4AlBhjY\"}"}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0df32d27-c998-45d5-b1ec-106e7c8520a2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3c7d6d0c-88f7-4c95-be90-80ee4f4792b0","keyName":"e2e-auth-iso-a-8828f7","subscription":"e2e-auth-iso-f25e9b","tenant":"e2e-shared-a-7d1f11","userId":"3c7d6d0c-88f7-4c95-be90-80ee4f4792b0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0df32d27-c998-45d5-b1ec-106e7c8520a2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0df32d27-c998-45d5-b1ec-106e7c8520a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0df32d27-c998-45d5-b1ec-106e7c8520a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0df32d27-c998-45d5-b1ec-106e7c8520a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/auth-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0df32d27-c998-45d5-b1ec-106e7c8520a2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f25e9b"}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0df32d27-c998-45d5-b1ec-106e7c8520a2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0df32d27-c998-45d5-b1ec-106e7c8520a2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0df32d27-c998-45d5-b1ec-106e7c8520a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0df32d27-c998-45d5-b1ec-106e7c8520a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:28:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0df32d27-c998-45d5-b1ec-106e7c8520a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:28:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"info","ts":"2026-07-22T14:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b"}
{"level":"info","ts":"2026-07-22T14:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"info","ts":"2026-07-22T14:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"}
{"level":"info","ts":"2026-07-22T14:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"info","ts":"2026-07-22T14:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"}
{"level":"info","ts":"2026-07-22T14:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"info","ts":"2026-07-22T14:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be"}
{"level":"debug","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"}
{"level":"info","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"}
{"level":"info","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"}
{"level":"debug","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:28:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:28:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"}
{"level":"debug","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b"}
{"level":"debug","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b"}
{"level":"debug","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:28:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:28:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b"}
{"level":"debug","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"info","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"info","ts":"2026-07-22T14:28:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"error","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"error","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"error","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be"}
{"level":"error","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:28:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be"}
{"level":"debug","ts":"2026-07-22T14:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:28:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:28:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"info","ts":"2026-07-22T14:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:28:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:28:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"info","ts":"2026-07-22T14:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"debug","ts":"2026-07-22T14:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:28:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:28:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be"}
{"level":"info","ts":"2026-07-22T14:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"info","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eba0b810-b616-41c5-8124-39a0094aad01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52806","PortSpecifier":{"PortValue":52806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eba0b810-b616-41c5-8124-39a0094aad01","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eba0b810-b616-41c5-8124-39a0094aad01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52806","PortSpecifier":{"PortValue":52806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730526,"nanos":831667246},"http":{"id":"eba0b810-b616-41c5-8124-39a0094aad01","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eba0b810-b616-41c5-8124-39a0094aad01","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eba0b810-b616-41c5-8124-39a0094aad01","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eba0b810-b616-41c5-8124-39a0094aad01","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eba0b810-b616-41c5-8124-39a0094aad01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eba0b810-b616-41c5-8124-39a0094aad01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eba0b810-b616-41c5-8124-39a0094aad01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/auth-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eba0b810-b616-41c5-8124-39a0094aad01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eba0b810-b616-41c5-8124-39a0094aad01","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eba0b810-b616-41c5-8124-39a0094aad01","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eba0b810-b616-41c5-8124-39a0094aad01","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eba0b810-b616-41c5-8124-39a0094aad01","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2d26232-ea80-4961-a386-378dc60b28dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37132","PortSpecifier":{"PortValue":37132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2d26232-ea80-4961-a386-378dc60b28dd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2d26232-ea80-4961-a386-378dc60b28dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37132","PortSpecifier":{"PortValue":37132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730526,"nanos":867868707},"http":{"id":"f2d26232-ea80-4961-a386-378dc60b28dd","method":"POST","headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f2d26232-ea80-4961-a386-378dc60b28dd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2d26232-ea80-4961-a386-378dc60b28dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2d26232-ea80-4961-a386-378dc60b28dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2d26232-ea80-4961-a386-378dc60b28dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2d26232-ea80-4961-a386-378dc60b28dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2d26232-ea80-4961-a386-378dc60b28dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0b3df/auth-test-model-f0b3df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0b3df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f2d26232-ea80-4961-a386-378dc60b28dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2d26232-ea80-4961-a386-378dc60b28dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2d26232-ea80-4961-a386-378dc60b28dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2d26232-ea80-4961-a386-378dc60b28dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2d26232-ea80-4961-a386-378dc60b28dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a85fe261-d674-4cd4-8958-266821ddce56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37138","PortSpecifier":{"PortValue":37138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a85fe261-d674-4cd4-8958-266821ddce56","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a85fe261-d674-4cd4-8958-266821ddce56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37138","PortSpecifier":{"PortValue":37138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730526,"nanos":907991017},"http":{"id":"a85fe261-d674-4cd4-8958-266821ddce56","method":"GET","headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a85fe261-d674-4cd4-8958-266821ddce56","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LINYkT82xOoYCWKm_wGvWxBosnZKWXxLGCaYJazKCprKIdrOkOuw1wnYPA0Z"}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a85fe261-d674-4cd4-8958-266821ddce56","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f0b3df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LINYkT82xOoYCWKm_wGvWxBosnZKWXxLGCaYJazKCprKIdrOkOuw1wnYPA0Z\"}"}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a85fe261-d674-4cd4-8958-266821ddce56","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0b3df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a85fe261-d674-4cd4-8958-266821ddce56","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a85fe261-d674-4cd4-8958-266821ddce56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a85fe261-d674-4cd4-8958-266821ddce56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a85fe261-d674-4cd4-8958-266821ddce56","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-22T14:28:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a85fe261-d674-4cd4-8958-266821ddce56","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-22T14:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"info","ts":"2026-07-22T14:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b"}
{"level":"info","ts":"2026-07-22T14:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"info","ts":"2026-07-22T14:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"info","ts":"2026-07-22T14:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"info","ts":"2026-07-22T14:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be"}
{"level":"info","ts":"2026-07-22T14:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"}
{"level":"info","ts":"2026-07-22T14:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"}
{"level":"info","ts":"2026-07-22T14:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"debug","ts":"2026-07-22T14:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"info","ts":"2026-07-22T14:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"error","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b"}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b"}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b"}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"error","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be"}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be"}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be"}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"}
{"level":"error","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a75a0fb4-2e09-426f-b0bd-0c7be8fe3f0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42410","PortSpecifier":{"PortValue":42410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a75a0fb4-2e09-426f-b0bd-0c7be8fe3f0f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a75a0fb4-2e09-426f-b0bd-0c7be8fe3f0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42410","PortSpecifier":{"PortValue":42410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730544,"nanos":138325692},"http":{"id":"a75a0fb4-2e09-426f-b0bd-0c7be8fe3f0f","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a75a0fb4-2e09-426f-b0bd-0c7be8fe3f0f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a75a0fb4-2e09-426f-b0bd-0c7be8fe3f0f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a75a0fb4-2e09-426f-b0bd-0c7be8fe3f0f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a75a0fb4-2e09-426f-b0bd-0c7be8fe3f0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a75a0fb4-2e09-426f-b0bd-0c7be8fe3f0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a75a0fb4-2e09-426f-b0bd-0c7be8fe3f0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/auth-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a75a0fb4-2e09-426f-b0bd-0c7be8fe3f0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a75a0fb4-2e09-426f-b0bd-0c7be8fe3f0f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a75a0fb4-2e09-426f-b0bd-0c7be8fe3f0f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a75a0fb4-2e09-426f-b0bd-0c7be8fe3f0f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a75a0fb4-2e09-426f-b0bd-0c7be8fe3f0f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"267f7ea6-1501-4a0f-b5da-4bf8f00825dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47708","PortSpecifier":{"PortValue":47708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"267f7ea6-1501-4a0f-b5da-4bf8f00825dd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"267f7ea6-1501-4a0f-b5da-4bf8f00825dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47708","PortSpecifier":{"PortValue":47708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730544,"nanos":171732308},"http":{"id":"267f7ea6-1501-4a0f-b5da-4bf8f00825dd","method":"POST","headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"267f7ea6-1501-4a0f-b5da-4bf8f00825dd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"267f7ea6-1501-4a0f-b5da-4bf8f00825dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"267f7ea6-1501-4a0f-b5da-4bf8f00825dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"267f7ea6-1501-4a0f-b5da-4bf8f00825dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"267f7ea6-1501-4a0f-b5da-4bf8f00825dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"267f7ea6-1501-4a0f-b5da-4bf8f00825dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0b3df/auth-test-model-f0b3df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0b3df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"267f7ea6-1501-4a0f-b5da-4bf8f00825dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"267f7ea6-1501-4a0f-b5da-4bf8f00825dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"267f7ea6-1501-4a0f-b5da-4bf8f00825dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"267f7ea6-1501-4a0f-b5da-4bf8f00825dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"267f7ea6-1501-4a0f-b5da-4bf8f00825dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e670da8-e7c9-4357-b059-cc8d7c7d2a88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42414","PortSpecifier":{"PortValue":42414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e670da8-e7c9-4357-b059-cc8d7c7d2a88","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e670da8-e7c9-4357-b059-cc8d7c7d2a88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42414","PortSpecifier":{"PortValue":42414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730544,"nanos":207547070},"http":{"id":"7e670da8-e7c9-4357-b059-cc8d7c7d2a88","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7e670da8-e7c9-4357-b059-cc8d7c7d2a88","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e670da8-e7c9-4357-b059-cc8d7c7d2a88","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e670da8-e7c9-4357-b059-cc8d7c7d2a88","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e670da8-e7c9-4357-b059-cc8d7c7d2a88","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e670da8-e7c9-4357-b059-cc8d7c7d2a88","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e670da8-e7c9-4357-b059-cc8d7c7d2a88","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/auth-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e670da8-e7c9-4357-b059-cc8d7c7d2a88","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e670da8-e7c9-4357-b059-cc8d7c7d2a88","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e670da8-e7c9-4357-b059-cc8d7c7d2a88","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e670da8-e7c9-4357-b059-cc8d7c7d2a88","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e670da8-e7c9-4357-b059-cc8d7c7d2a88","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f84c4fde-1c4d-42f3-a47f-7e11c7a84840","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47718","PortSpecifier":{"PortValue":47718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f84c4fde-1c4d-42f3-a47f-7e11c7a84840","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f84c4fde-1c4d-42f3-a47f-7e11c7a84840","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47718","PortSpecifier":{"PortValue":47718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730544,"nanos":243723202},"http":{"id":"f84c4fde-1c4d-42f3-a47f-7e11c7a84840","method":"POST","headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f84c4fde-1c4d-42f3-a47f-7e11c7a84840","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f84c4fde-1c4d-42f3-a47f-7e11c7a84840","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f84c4fde-1c4d-42f3-a47f-7e11c7a84840","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f84c4fde-1c4d-42f3-a47f-7e11c7a84840","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f84c4fde-1c4d-42f3-a47f-7e11c7a84840","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f84c4fde-1c4d-42f3-a47f-7e11c7a84840","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0b3df/auth-test-model-f0b3df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0b3df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f84c4fde-1c4d-42f3-a47f-7e11c7a84840","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f84c4fde-1c4d-42f3-a47f-7e11c7a84840","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f84c4fde-1c4d-42f3-a47f-7e11c7a84840","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f84c4fde-1c4d-42f3-a47f-7e11c7a84840","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:29:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f84c4fde-1c4d-42f3-a47f-7e11c7a84840","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"}
{"level":"info","ts":"2026-07-22T14:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"info","ts":"2026-07-22T14:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b"}
{"level":"info","ts":"2026-07-22T14:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be"}
{"level":"info","ts":"2026-07-22T14:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"info","ts":"2026-07-22T14:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"info","ts":"2026-07-22T14:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"info","ts":"2026-07-22T14:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"}
{"level":"info","ts":"2026-07-22T14:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"debug","ts":"2026-07-22T14:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"}
{"level":"info","ts":"2026-07-22T14:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"}
{"level":"error","ts":"2026-07-22T14:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"error","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"}
{"level":"error","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"debug","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be"}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be"}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b"}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be"}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b"}
{"level":"info","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2cb2339-1ddb-4027-8820-735bc9f0f68d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58122","PortSpecifier":{"PortValue":58122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e2cb2339-1ddb-4027-8820-735bc9f0f68d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2cb2339-1ddb-4027-8820-735bc9f0f68d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58122","PortSpecifier":{"PortValue":58122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730561,"nanos":402255560},"http":{"id":"e2cb2339-1ddb-4027-8820-735bc9f0f68d","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e2cb2339-1ddb-4027-8820-735bc9f0f68d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e2cb2339-1ddb-4027-8820-735bc9f0f68d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e2cb2339-1ddb-4027-8820-735bc9f0f68d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2cb2339-1ddb-4027-8820-735bc9f0f68d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2cb2339-1ddb-4027-8820-735bc9f0f68d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2cb2339-1ddb-4027-8820-735bc9f0f68d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/auth-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e2cb2339-1ddb-4027-8820-735bc9f0f68d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2cb2339-1ddb-4027-8820-735bc9f0f68d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2cb2339-1ddb-4027-8820-735bc9f0f68d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2cb2339-1ddb-4027-8820-735bc9f0f68d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2cb2339-1ddb-4027-8820-735bc9f0f68d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffbd0a70-3e19-4c8b-910b-f3571076e137","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36198","PortSpecifier":{"PortValue":36198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ffbd0a70-3e19-4c8b-910b-f3571076e137","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffbd0a70-3e19-4c8b-910b-f3571076e137","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36198","PortSpecifier":{"PortValue":36198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730561,"nanos":442813100},"http":{"id":"ffbd0a70-3e19-4c8b-910b-f3571076e137","method":"POST","headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ffbd0a70-3e19-4c8b-910b-f3571076e137","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ffbd0a70-3e19-4c8b-910b-f3571076e137","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ffbd0a70-3e19-4c8b-910b-f3571076e137","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffbd0a70-3e19-4c8b-910b-f3571076e137","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffbd0a70-3e19-4c8b-910b-f3571076e137","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffbd0a70-3e19-4c8b-910b-f3571076e137","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0b3df/auth-test-model-f0b3df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0b3df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ffbd0a70-3e19-4c8b-910b-f3571076e137","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffbd0a70-3e19-4c8b-910b-f3571076e137","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffbd0a70-3e19-4c8b-910b-f3571076e137","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffbd0a70-3e19-4c8b-910b-f3571076e137","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffbd0a70-3e19-4c8b-910b-f3571076e137","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46e247a6-8dff-4f74-9188-0da44bf79776","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36214","PortSpecifier":{"PortValue":36214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46e247a6-8dff-4f74-9188-0da44bf79776","method":"GET","path":"/maas-api/v1/api-keys/54fa5e69-a9a7-4bf2-9e38-0b587866ad0b","host":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46e247a6-8dff-4f74-9188-0da44bf79776","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36214","PortSpecifier":{"PortValue":36214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730561,"nanos":478862486},"http":{"id":"46e247a6-8dff-4f74-9188-0da44bf79776","method":"GET","headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/54fa5e69-a9a7-4bf2-9e38-0b587866ad0b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"46e247a6-8dff-4f74-9188-0da44bf79776","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46e247a6-8dff-4f74-9188-0da44bf79776","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46e247a6-8dff-4f74-9188-0da44bf79776","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/54fa5e69-a9a7-4bf2-9e38-0b587866ad0b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46e247a6-8dff-4f74-9188-0da44bf79776","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46e247a6-8dff-4f74-9188-0da44bf79776","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46e247a6-8dff-4f74-9188-0da44bf79776","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0b3df/auth-test-model-f0b3df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0b3df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"46e247a6-8dff-4f74-9188-0da44bf79776","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46e247a6-8dff-4f74-9188-0da44bf79776","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46e247a6-8dff-4f74-9188-0da44bf79776","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46e247a6-8dff-4f74-9188-0da44bf79776","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46e247a6-8dff-4f74-9188-0da44bf79776","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd1e3946-0621-4d31-9bb3-43c582ec3287","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58132","PortSpecifier":{"PortValue":58132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd1e3946-0621-4d31-9bb3-43c582ec3287","method":"GET","path":"/maas-api/v1/api-keys/54fa5e69-a9a7-4bf2-9e38-0b587866ad0b","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd1e3946-0621-4d31-9bb3-43c582ec3287","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58132","PortSpecifier":{"PortValue":58132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730561,"nanos":510000503},"http":{"id":"fd1e3946-0621-4d31-9bb3-43c582ec3287","method":"GET","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/54fa5e69-a9a7-4bf2-9e38-0b587866ad0b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd1e3946-0621-4d31-9bb3-43c582ec3287","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd1e3946-0621-4d31-9bb3-43c582ec3287","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd1e3946-0621-4d31-9bb3-43c582ec3287","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/54fa5e69-a9a7-4bf2-9e38-0b587866ad0b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd1e3946-0621-4d31-9bb3-43c582ec3287","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd1e3946-0621-4d31-9bb3-43c582ec3287","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd1e3946-0621-4d31-9bb3-43c582ec3287","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/auth-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd1e3946-0621-4d31-9bb3-43c582ec3287","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd1e3946-0621-4d31-9bb3-43c582ec3287","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd1e3946-0621-4d31-9bb3-43c582ec3287","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd1e3946-0621-4d31-9bb3-43c582ec3287","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:29:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd1e3946-0621-4d31-9bb3-43c582ec3287","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"info","ts":"2026-07-22T14:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be"}
{"level":"info","ts":"2026-07-22T14:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"info","ts":"2026-07-22T14:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"info","ts":"2026-07-22T14:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"}
{"level":"info","ts":"2026-07-22T14:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"}
{"level":"info","ts":"2026-07-22T14:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b"}
{"level":"info","ts":"2026-07-22T14:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"error","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b"}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be"}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:29:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b"}
{"level":"info","ts":"2026-07-22T14:29:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be"}
{"level":"info","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa5489f7-aa1d-4028-a5fe-b41c49283776","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57638","PortSpecifier":{"PortValue":57638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa5489f7-aa1d-4028-a5fe-b41c49283776","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa5489f7-aa1d-4028-a5fe-b41c49283776","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57638","PortSpecifier":{"PortValue":57638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730580,"nanos":828053869},"http":{"id":"fa5489f7-aa1d-4028-a5fe-b41c49283776","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa5489f7-aa1d-4028-a5fe-b41c49283776","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa5489f7-aa1d-4028-a5fe-b41c49283776","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa5489f7-aa1d-4028-a5fe-b41c49283776","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa5489f7-aa1d-4028-a5fe-b41c49283776","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa5489f7-aa1d-4028-a5fe-b41c49283776","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa5489f7-aa1d-4028-a5fe-b41c49283776","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/auth-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa5489f7-aa1d-4028-a5fe-b41c49283776","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa5489f7-aa1d-4028-a5fe-b41c49283776","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa5489f7-aa1d-4028-a5fe-b41c49283776","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa5489f7-aa1d-4028-a5fe-b41c49283776","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa5489f7-aa1d-4028-a5fe-b41c49283776","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8038b74d-aa41-4b8f-abb8-d40650787d57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42934","PortSpecifier":{"PortValue":42934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8038b74d-aa41-4b8f-abb8-d40650787d57","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8038b74d-aa41-4b8f-abb8-d40650787d57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42934","PortSpecifier":{"PortValue":42934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730580,"nanos":860379042},"http":{"id":"8038b74d-aa41-4b8f-abb8-d40650787d57","method":"POST","headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8038b74d-aa41-4b8f-abb8-d40650787d57","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8038b74d-aa41-4b8f-abb8-d40650787d57","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8038b74d-aa41-4b8f-abb8-d40650787d57","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8038b74d-aa41-4b8f-abb8-d40650787d57","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8038b74d-aa41-4b8f-abb8-d40650787d57","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8038b74d-aa41-4b8f-abb8-d40650787d57","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0b3df/auth-test-model-f0b3df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0b3df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8038b74d-aa41-4b8f-abb8-d40650787d57","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8038b74d-aa41-4b8f-abb8-d40650787d57","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8038b74d-aa41-4b8f-abb8-d40650787d57","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8038b74d-aa41-4b8f-abb8-d40650787d57","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8038b74d-aa41-4b8f-abb8-d40650787d57","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd8666ff-c9ed-4a1a-8cf5-3afd883596dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57644","PortSpecifier":{"PortValue":57644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd8666ff-c9ed-4a1a-8cf5-3afd883596dc","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd8666ff-c9ed-4a1a-8cf5-3afd883596dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57644","PortSpecifier":{"PortValue":57644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730580,"nanos":897599030},"http":{"id":"dd8666ff-c9ed-4a1a-8cf5-3afd883596dc","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd8666ff-c9ed-4a1a-8cf5-3afd883596dc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pispO5TvwiUhgYNO_OxQVOLvazCaNM99qnyC4nrmAOsbz2W8FAtS9BtFpAR8"}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dd8666ff-c9ed-4a1a-8cf5-3afd883596dc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pispO5TvwiUhgYNO_OxQVOLvazCaNM99qnyC4nrmAOsbz2W8FAtS9BtFpAR8\"}"}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dd8666ff-c9ed-4a1a-8cf5-3afd883596dc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b42fe117-82df-4396-97eb-5b12e1fa09f5","keyName":"e2e-auth-iso-a-50bc7f","subscription":"e2e-auth-iso-0b0243","tenant":"e2e-shared-a-7d1f11","userId":"b42fe117-82df-4396-97eb-5b12e1fa09f5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd8666ff-c9ed-4a1a-8cf5-3afd883596dc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd8666ff-c9ed-4a1a-8cf5-3afd883596dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd8666ff-c9ed-4a1a-8cf5-3afd883596dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd8666ff-c9ed-4a1a-8cf5-3afd883596dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/auth-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd8666ff-c9ed-4a1a-8cf5-3afd883596dc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd8666ff-c9ed-4a1a-8cf5-3afd883596dc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-0b0243"}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd8666ff-c9ed-4a1a-8cf5-3afd883596dc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd8666ff-c9ed-4a1a-8cf5-3afd883596dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd8666ff-c9ed-4a1a-8cf5-3afd883596dc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:29:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd8666ff-c9ed-4a1a-8cf5-3afd883596dc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f4020a0720e3ddef8e7d97ba98cc43303d92b829c8a2d3886e6917b736ad929"}
{"level":"info","ts":"2026-07-22T14:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d53c27bcfad81801ead97e0ed16a25cdb9f9294064efd8e18b032d3351da0b61"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/179963085a8674852867e07c0f1fabd478c2ab5ff8e43cfd1d1335481d7b0d60"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/263811458c04ccc918d4f7083f6c49c146908fa3268134d91d9394c83ae314b5"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a451e49b9f1e9bb611451c890741ee05b9b11d89e2666277913dca97afeea985"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af49527c11d50f200dbbe1ab01d7b3a7a5a1a73390cb95f7615a8a965a702939"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1137e4c9d4524ea0756f5f7bd2175ce7c804228d964589bf32b238aa9433d08"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a998bf4df63d9427dd95b670422f411e7c340cc5dbb1da1a8eb2c6441e149332"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3eb478f2374598cbba007dc5b3a218472f2a19319d85e014a7960d8def04a2be"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e0ee9bd5bae035f0f01d68c7fbb32506df1b1b1c7af3be727489fb22cb5b26b"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67cbc92c0425df31edb0d8ba8c323fabfeed5745f57647a1114a3267b44bcaca"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0adfd8528fc8278612cf7cd8b7409337a1de070c3c9073befc981b01f9ae4eed"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ded83e942631b10e88f636b5ebdfb48a94871cbc35e9e9b060a89ad8d9eb05df"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39a33d1c15866ef54a9154c252619046ccf1e0cf20e1d3e8083210ef06df0ad8"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f6e8ca23e24ea2f5c14b86691a3c7d5c2a55b18ea3e6a0d843cec4994dc2ac7"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20b819691b2654f001d11bae5a4601e55ed15635f62b36bab777c92a25a22736"}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd"}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd"}
{"level":"error","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd"}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd"}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd"}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"}
{"level":"debug","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b"}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b"}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb4156a0a81c1bb696b210b0eeeb212242216d08d39ea477fa674db2bb26c0f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb4156a0a81c1bb696b210b0eeeb212242216d08d39ea477fa674db2bb26c0f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb4156a0a81c1bb696b210b0eeeb212242216d08d39ea477fa674db2bb26c0f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb4156a0a81c1bb696b210b0eeeb212242216d08d39ea477fa674db2bb26c0f6"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb4156a0a81c1bb696b210b0eeeb212242216d08d39ea477fa674db2bb26c0f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb4156a0a81c1bb696b210b0eeeb212242216d08d39ea477fa674db2bb26c0f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb4156a0a81c1bb696b210b0eeeb212242216d08d39ea477fa674db2bb26c0f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb4156a0a81c1bb696b210b0eeeb212242216d08d39ea477fa674db2bb26c0f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb4156a0a81c1bb696b210b0eeeb212242216d08d39ea477fa674db2bb26c0f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b"}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb4156a0a81c1bb696b210b0eeeb212242216d08d39ea477fa674db2bb26c0f6"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b"}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54"}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54"}
{"level":"error","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54"}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f8aa8aea7ac9d10b0e3dd3092d48795023e1bef0f18e73c6186305d1a9576a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f8aa8aea7ac9d10b0e3dd3092d48795023e1bef0f18e73c6186305d1a9576a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8aa8aea7ac9d10b0e3dd3092d48795023e1bef0f18e73c6186305d1a9576a4"}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f8aa8aea7ac9d10b0e3dd3092d48795023e1bef0f18e73c6186305d1a9576a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f8aa8aea7ac9d10b0e3dd3092d48795023e1bef0f18e73c6186305d1a9576a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8aa8aea7ac9d10b0e3dd3092d48795023e1bef0f18e73c6186305d1a9576a4"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f8aa8aea7ac9d10b0e3dd3092d48795023e1bef0f18e73c6186305d1a9576a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f8aa8aea7ac9d10b0e3dd3092d48795023e1bef0f18e73c6186305d1a9576a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8aa8aea7ac9d10b0e3dd3092d48795023e1bef0f18e73c6186305d1a9576a4"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f8aa8aea7ac9d10b0e3dd3092d48795023e1bef0f18e73c6186305d1a9576a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f8aa8aea7ac9d10b0e3dd3092d48795023e1bef0f18e73c6186305d1a9576a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8aa8aea7ac9d10b0e3dd3092d48795023e1bef0f18e73c6186305d1a9576a4"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f8aa8aea7ac9d10b0e3dd3092d48795023e1bef0f18e73c6186305d1a9576a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f8aa8aea7ac9d10b0e3dd3092d48795023e1bef0f18e73c6186305d1a9576a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f8aa8aea7ac9d10b0e3dd3092d48795023e1bef0f18e73c6186305d1a9576a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f8aa8aea7ac9d10b0e3dd3092d48795023e1bef0f18e73c6186305d1a9576a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54"}
{"level":"error","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cdd0cbdb8f2a42cb961d094f760fefe79c22a1c87cd6687362885955a32e2e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cdd0cbdb8f2a42cb961d094f760fefe79c22a1c87cd6687362885955a32e2e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8aa8aea7ac9d10b0e3dd3092d48795023e1bef0f18e73c6186305d1a9576a4"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cdd0cbdb8f2a42cb961d094f760fefe79c22a1c87cd6687362885955a32e2e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81c8e365e16a2342bec80337e19104c923e6e6508a86edf2c7e5798b1faeed81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81c8e365e16a2342bec80337e19104c923e6e6508a86edf2c7e5798b1faeed81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cdd0cbdb8f2a42cb961d094f760fefe79c22a1c87cd6687362885955a32e2e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cdd0cbdb8f2a42cb961d094f760fefe79c22a1c87cd6687362885955a32e2e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81c8e365e16a2342bec80337e19104c923e6e6508a86edf2c7e5798b1faeed81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cdd0cbdb8f2a42cb961d094f760fefe79c22a1c87cd6687362885955a32e2e6"}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cdd0cbdb8f2a42cb961d094f760fefe79c22a1c87cd6687362885955a32e2e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cdd0cbdb8f2a42cb961d094f760fefe79c22a1c87cd6687362885955a32e2e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cdd0cbdb8f2a42cb961d094f760fefe79c22a1c87cd6687362885955a32e2e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81c8e365e16a2342bec80337e19104c923e6e6508a86edf2c7e5798b1faeed81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cdd0cbdb8f2a42cb961d094f760fefe79c22a1c87cd6687362885955a32e2e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cdd0cbdb8f2a42cb961d094f760fefe79c22a1c87cd6687362885955a32e2e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81c8e365e16a2342bec80337e19104c923e6e6508a86edf2c7e5798b1faeed81"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81c8e365e16a2342bec80337e19104c923e6e6508a86edf2c7e5798b1faeed81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81c8e365e16a2342bec80337e19104c923e6e6508a86edf2c7e5798b1faeed81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81c8e365e16a2342bec80337e19104c923e6e6508a86edf2c7e5798b1faeed81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cdd0cbdb8f2a42cb961d094f760fefe79c22a1c87cd6687362885955a32e2e6"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2029394cc894f447c93a54e8dd344bbaf9db170d8b816a05241da4d6933c77dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2029394cc894f447c93a54e8dd344bbaf9db170d8b816a05241da4d6933c77dc"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81c8e365e16a2342bec80337e19104c923e6e6508a86edf2c7e5798b1faeed81"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2029394cc894f447c93a54e8dd344bbaf9db170d8b816a05241da4d6933c77dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81c8e365e16a2342bec80337e19104c923e6e6508a86edf2c7e5798b1faeed81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"976b8b51fb932c0c7f2d46dd5b2505dec8d0deae15d0888832006681f2917534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/976b8b51fb932c0c7f2d46dd5b2505dec8d0deae15d0888832006681f2917534"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fe9e1678f8533c3632e5a4235329dcafca19cd3ddcb61cb50b8ac7015823147"}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"976b8b51fb932c0c7f2d46dd5b2505dec8d0deae15d0888832006681f2917534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ea79e5ff75df0ae13b3977ac832a9ab63a747005d2a3795f091541120d4d187"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fe9e1678f8533c3632e5a4235329dcafca19cd3ddcb61cb50b8ac7015823147","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fe9e1678f8533c3632e5a4235329dcafca19cd3ddcb61cb50b8ac7015823147"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2029394cc894f447c93a54e8dd344bbaf9db170d8b816a05241da4d6933c77dc"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51d2ce19f6bf6b1a252cbb7e1c98dcf1a2a406207f048849e980f885c06a048b"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07619266cc80d28d5552797f1179883bdd243aa83c3815a075f2d8e4f7a8d42d"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fe9e1678f8533c3632e5a4235329dcafca19cd3ddcb61cb50b8ac7015823147","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f73d4319d176a89bf7ab3a7680e5df8060daba835b2f0418553ada26205a307"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/976b8b51fb932c0c7f2d46dd5b2505dec8d0deae15d0888832006681f2917534"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ea79e5ff75df0ae13b3977ac832a9ab63a747005d2a3795f091541120d4d187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ea79e5ff75df0ae13b3977ac832a9ab63a747005d2a3795f091541120d4d187"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f166b3dbb27ab91dcbb1ea9db63b7ca0c7159cf642a65428004f3fe3c97ffb6e"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ea79e5ff75df0ae13b3977ac832a9ab63a747005d2a3795f091541120d4d187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2029394cc894f447c93a54e8dd344bbaf9db170d8b816a05241da4d6933c77dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2029394cc894f447c93a54e8dd344bbaf9db170d8b816a05241da4d6933c77dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdcc938d55cf523028026bb02d5c8315dba406b7a966720a155bb9c2b79b71a0"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2029394cc894f447c93a54e8dd344bbaf9db170d8b816a05241da4d6933c77dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51d2ce19f6bf6b1a252cbb7e1c98dcf1a2a406207f048849e980f885c06a048b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51d2ce19f6bf6b1a252cbb7e1c98dcf1a2a406207f048849e980f885c06a048b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fe9e1678f8533c3632e5a4235329dcafca19cd3ddcb61cb50b8ac7015823147"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51d2ce19f6bf6b1a252cbb7e1c98dcf1a2a406207f048849e980f885c06a048b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07619266cc80d28d5552797f1179883bdd243aa83c3815a075f2d8e4f7a8d42d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07619266cc80d28d5552797f1179883bdd243aa83c3815a075f2d8e4f7a8d42d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ea79e5ff75df0ae13b3977ac832a9ab63a747005d2a3795f091541120d4d187"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07619266cc80d28d5552797f1179883bdd243aa83c3815a075f2d8e4f7a8d42d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f73d4319d176a89bf7ab3a7680e5df8060daba835b2f0418553ada26205a307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f73d4319d176a89bf7ab3a7680e5df8060daba835b2f0418553ada26205a307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2029394cc894f447c93a54e8dd344bbaf9db170d8b816a05241da4d6933c77dc"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51d2ce19f6bf6b1a252cbb7e1c98dcf1a2a406207f048849e980f885c06a048b"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07619266cc80d28d5552797f1179883bdd243aa83c3815a075f2d8e4f7a8d42d"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f73d4319d176a89bf7ab3a7680e5df8060daba835b2f0418553ada26205a307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"976b8b51fb932c0c7f2d46dd5b2505dec8d0deae15d0888832006681f2917534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["976b8b51fb932c0c7f2d46dd5b2505dec8d0deae15d0888832006681f2917534"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f73d4319d176a89bf7ab3a7680e5df8060daba835b2f0418553ada26205a307"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"976b8b51fb932c0c7f2d46dd5b2505dec8d0deae15d0888832006681f2917534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f166b3dbb27ab91dcbb1ea9db63b7ca0c7159cf642a65428004f3fe3c97ffb6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f166b3dbb27ab91dcbb1ea9db63b7ca0c7159cf642a65428004f3fe3c97ffb6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/976b8b51fb932c0c7f2d46dd5b2505dec8d0deae15d0888832006681f2917534"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f166b3dbb27ab91dcbb1ea9db63b7ca0c7159cf642a65428004f3fe3c97ffb6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f166b3dbb27ab91dcbb1ea9db63b7ca0c7159cf642a65428004f3fe3c97ffb6e"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdcc938d55cf523028026bb02d5c8315dba406b7a966720a155bb9c2b79b71a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdcc938d55cf523028026bb02d5c8315dba406b7a966720a155bb9c2b79b71a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdcc938d55cf523028026bb02d5c8315dba406b7a966720a155bb9c2b79b71a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdcc938d55cf523028026bb02d5c8315dba406b7a966720a155bb9c2b79b71a0"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fe9e1678f8533c3632e5a4235329dcafca19cd3ddcb61cb50b8ac7015823147","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ea79e5ff75df0ae13b3977ac832a9ab63a747005d2a3795f091541120d4d187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2029394cc894f447c93a54e8dd344bbaf9db170d8b816a05241da4d6933c77dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51d2ce19f6bf6b1a252cbb7e1c98dcf1a2a406207f048849e980f885c06a048b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07619266cc80d28d5552797f1179883bdd243aa83c3815a075f2d8e4f7a8d42d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f73d4319d176a89bf7ab3a7680e5df8060daba835b2f0418553ada26205a307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"976b8b51fb932c0c7f2d46dd5b2505dec8d0deae15d0888832006681f2917534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f166b3dbb27ab91dcbb1ea9db63b7ca0c7159cf642a65428004f3fe3c97ffb6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdcc938d55cf523028026bb02d5c8315dba406b7a966720a155bb9c2b79b71a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796"}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796"}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796"}
{"level":"info","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796"}
{"level":"error","ts":"2026-07-22T14:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffd709e7-8f6f-4d50-abb1-f5da373f2faf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39534","PortSpecifier":{"PortValue":39534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ffd709e7-8f6f-4d50-abb1-f5da373f2faf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffd709e7-8f6f-4d50-abb1-f5da373f2faf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39534","PortSpecifier":{"PortValue":39534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730651,"nanos":839952587},"http":{"id":"ffd709e7-8f6f-4d50-abb1-f5da373f2faf","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ffd709e7-8f6f-4d50-abb1-f5da373f2faf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ffd709e7-8f6f-4d50-abb1-f5da373f2faf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ffd709e7-8f6f-4d50-abb1-f5da373f2faf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffd709e7-8f6f-4d50-abb1-f5da373f2faf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffd709e7-8f6f-4d50-abb1-f5da373f2faf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffd709e7-8f6f-4d50-abb1-f5da373f2faf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/sub-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ffd709e7-8f6f-4d50-abb1-f5da373f2faf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffd709e7-8f6f-4d50-abb1-f5da373f2faf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffd709e7-8f6f-4d50-abb1-f5da373f2faf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffd709e7-8f6f-4d50-abb1-f5da373f2faf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffd709e7-8f6f-4d50-abb1-f5da373f2faf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92348115-8bb1-4303-817c-fb9cf5d9f9dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57616","PortSpecifier":{"PortValue":57616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92348115-8bb1-4303-817c-fb9cf5d9f9dd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92348115-8bb1-4303-817c-fb9cf5d9f9dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57616","PortSpecifier":{"PortValue":57616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730651,"nanos":876136847},"http":{"id":"92348115-8bb1-4303-817c-fb9cf5d9f9dd","method":"POST","headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"92348115-8bb1-4303-817c-fb9cf5d9f9dd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92348115-8bb1-4303-817c-fb9cf5d9f9dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92348115-8bb1-4303-817c-fb9cf5d9f9dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92348115-8bb1-4303-817c-fb9cf5d9f9dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92348115-8bb1-4303-817c-fb9cf5d9f9dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92348115-8bb1-4303-817c-fb9cf5d9f9dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0b3df/sub-test-model-f0b3df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0b3df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"92348115-8bb1-4303-817c-fb9cf5d9f9dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92348115-8bb1-4303-817c-fb9cf5d9f9dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92348115-8bb1-4303-817c-fb9cf5d9f9dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92348115-8bb1-4303-817c-fb9cf5d9f9dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92348115-8bb1-4303-817c-fb9cf5d9f9dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48aea0ac-8cfb-4cbf-af7a-a88d32539d52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39546","PortSpecifier":{"PortValue":39546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48aea0ac-8cfb-4cbf-af7a-a88d32539d52","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48aea0ac-8cfb-4cbf-af7a-a88d32539d52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39546","PortSpecifier":{"PortValue":39546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730651,"nanos":910801227},"http":{"id":"48aea0ac-8cfb-4cbf-af7a-a88d32539d52","method":"GET","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48aea0ac-8cfb-4cbf-af7a-a88d32539d52","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10fujK60iEVGk7LTD_B6tP8bVQqoZ0zoez6cNXQZyc8dJY6pzLH5svn7FEbG8"}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"48aea0ac-8cfb-4cbf-af7a-a88d32539d52","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10fujK60iEVGk7LTD_B6tP8bVQqoZ0zoez6cNXQZyc8dJY6pzLH5svn7FEbG8\"}"}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"48aea0ac-8cfb-4cbf-af7a-a88d32539d52","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"21bb8be9-4b63-41bd-b907-06820501174d","keyName":"e2e-sub-iso-be583f","subscription":"e2e-a-only-ba991e","tenant":"e2e-shared-a-7d1f11","userId":"21bb8be9-4b63-41bd-b907-06820501174d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48aea0ac-8cfb-4cbf-af7a-a88d32539d52","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48aea0ac-8cfb-4cbf-af7a-a88d32539d52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48aea0ac-8cfb-4cbf-af7a-a88d32539d52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48aea0ac-8cfb-4cbf-af7a-a88d32539d52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/sub-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48aea0ac-8cfb-4cbf-af7a-a88d32539d52","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48aea0ac-8cfb-4cbf-af7a-a88d32539d52","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"48aea0ac-8cfb-4cbf-af7a-a88d32539d52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48aea0ac-8cfb-4cbf-af7a-a88d32539d52","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-ba991e"}
{"level":"info","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48aea0ac-8cfb-4cbf-af7a-a88d32539d52","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48aea0ac-8cfb-4cbf-af7a-a88d32539d52","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beb2b911-af0d-45c9-b04d-22ab37dd75ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57628","PortSpecifier":{"PortValue":57628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"beb2b911-af0d-45c9-b04d-22ab37dd75ba","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beb2b911-af0d-45c9-b04d-22ab37dd75ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57628","PortSpecifier":{"PortValue":57628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730651,"nanos":949606095},"http":{"id":"beb2b911-af0d-45c9-b04d-22ab37dd75ba","method":"GET","headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"beb2b911-af0d-45c9-b04d-22ab37dd75ba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10bPxeayzGksWdxan_xZQ6dqbeQpqoAtehyxpbO094abbxdfK8h8PKaLVLD69"}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"beb2b911-af0d-45c9-b04d-22ab37dd75ba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f0b3df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10bPxeayzGksWdxan_xZQ6dqbeQpqoAtehyxpbO094abbxdfK8h8PKaLVLD69\"}"}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"beb2b911-af0d-45c9-b04d-22ab37dd75ba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0b3df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"262a7f7f-8d5b-41a2-acdb-857a8d3bff7a","keyName":"e2e-sub-iso-5d4d9a","subscription":"e2e-b-only-ba991e","tenant":"e2e-shared-b-f0b3df","userId":"262a7f7f-8d5b-41a2-acdb-857a8d3bff7a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"beb2b911-af0d-45c9-b04d-22ab37dd75ba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb2b911-af0d-45c9-b04d-22ab37dd75ba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb2b911-af0d-45c9-b04d-22ab37dd75ba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb2b911-af0d-45c9-b04d-22ab37dd75ba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0b3df/sub-test-model-f0b3df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0b3df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beb2b911-af0d-45c9-b04d-22ab37dd75ba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beb2b911-af0d-45c9-b04d-22ab37dd75ba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-ba991e"}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beb2b911-af0d-45c9-b04d-22ab37dd75ba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"beb2b911-af0d-45c9-b04d-22ab37dd75ba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beb2b911-af0d-45c9-b04d-22ab37dd75ba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beb2b911-af0d-45c9-b04d-22ab37dd75ba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d710ceb-ff52-4634-ba96-6134cc24eb92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38030","PortSpecifier":{"PortValue":38030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d710ceb-ff52-4634-ba96-6134cc24eb92","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d710ceb-ff52-4634-ba96-6134cc24eb92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38030","PortSpecifier":{"PortValue":38030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730666,"nanos":302081738},"http":{"id":"2d710ceb-ff52-4634-ba96-6134cc24eb92","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d710ceb-ff52-4634-ba96-6134cc24eb92","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d710ceb-ff52-4634-ba96-6134cc24eb92","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d710ceb-ff52-4634-ba96-6134cc24eb92","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d710ceb-ff52-4634-ba96-6134cc24eb92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d710ceb-ff52-4634-ba96-6134cc24eb92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d710ceb-ff52-4634-ba96-6134cc24eb92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/sub-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d710ceb-ff52-4634-ba96-6134cc24eb92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d710ceb-ff52-4634-ba96-6134cc24eb92","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d710ceb-ff52-4634-ba96-6134cc24eb92","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d710ceb-ff52-4634-ba96-6134cc24eb92","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d710ceb-ff52-4634-ba96-6134cc24eb92","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d594eded-d305-4e78-8eff-f183a817ffda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47318","PortSpecifier":{"PortValue":47318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d594eded-d305-4e78-8eff-f183a817ffda","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d594eded-d305-4e78-8eff-f183a817ffda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47318","PortSpecifier":{"PortValue":47318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730666,"nanos":338044474},"http":{"id":"d594eded-d305-4e78-8eff-f183a817ffda","method":"POST","headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d594eded-d305-4e78-8eff-f183a817ffda","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d594eded-d305-4e78-8eff-f183a817ffda","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d594eded-d305-4e78-8eff-f183a817ffda","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d594eded-d305-4e78-8eff-f183a817ffda","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d594eded-d305-4e78-8eff-f183a817ffda","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d594eded-d305-4e78-8eff-f183a817ffda","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0b3df/sub-test-model-f0b3df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0b3df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d594eded-d305-4e78-8eff-f183a817ffda","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d594eded-d305-4e78-8eff-f183a817ffda","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d594eded-d305-4e78-8eff-f183a817ffda","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d594eded-d305-4e78-8eff-f183a817ffda","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d594eded-d305-4e78-8eff-f183a817ffda","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2cbb021-f94e-4793-8133-6dbb3c500572","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38038","PortSpecifier":{"PortValue":38038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2cbb021-f94e-4793-8133-6dbb3c500572","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2cbb021-f94e-4793-8133-6dbb3c500572","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38038","PortSpecifier":{"PortValue":38038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730666,"nanos":370488402},"http":{"id":"b2cbb021-f94e-4793-8133-6dbb3c500572","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2cbb021-f94e-4793-8133-6dbb3c500572","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AirRySSVLpkbpvot_9cMVBL3DW5qrYlz9bbPET4RbJM6wgpvIkqhTuQOEz7Y"}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b2cbb021-f94e-4793-8133-6dbb3c500572","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AirRySSVLpkbpvot_9cMVBL3DW5qrYlz9bbPET4RbJM6wgpvIkqhTuQOEz7Y\"}"}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b2cbb021-f94e-4793-8133-6dbb3c500572","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6e244c32-7919-4ba2-b61e-9d7d781a0c7b","keyName":"e2e-sub-iso-80e819","subscription":"e2e-shared-sub-b536f7","tenant":"e2e-shared-a-7d1f11","userId":"6e244c32-7919-4ba2-b61e-9d7d781a0c7b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2cbb021-f94e-4793-8133-6dbb3c500572","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2cbb021-f94e-4793-8133-6dbb3c500572","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2cbb021-f94e-4793-8133-6dbb3c500572","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2cbb021-f94e-4793-8133-6dbb3c500572","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/sub-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2cbb021-f94e-4793-8133-6dbb3c500572","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b536f7"}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2cbb021-f94e-4793-8133-6dbb3c500572","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2cbb021-f94e-4793-8133-6dbb3c500572","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b2cbb021-f94e-4793-8133-6dbb3c500572","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2cbb021-f94e-4793-8133-6dbb3c500572","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2cbb021-f94e-4793-8133-6dbb3c500572","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e144648-694f-4d42-964a-f53c92f39bce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47324","PortSpecifier":{"PortValue":47324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e144648-694f-4d42-964a-f53c92f39bce","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e144648-694f-4d42-964a-f53c92f39bce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47324","PortSpecifier":{"PortValue":47324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730666,"nanos":397635268},"http":{"id":"7e144648-694f-4d42-964a-f53c92f39bce","method":"POST","headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e144648-694f-4d42-964a-f53c92f39bce","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15PRvXohlx8TJTgfc_WWjt149ekVpZ5ObEZi4eyf2v27eh1VX8mgf6OR9vnMU"}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7e144648-694f-4d42-964a-f53c92f39bce","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f0b3df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15PRvXohlx8TJTgfc_WWjt149ekVpZ5ObEZi4eyf2v27eh1VX8mgf6OR9vnMU\"}"}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7e144648-694f-4d42-964a-f53c92f39bce","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0b3df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4c2296e-dee7-491b-9214-b665a405006b","keyName":"e2e-sub-iso-2f91c2","subscription":"e2e-shared-sub-b536f7","tenant":"e2e-shared-b-f0b3df","userId":"e4c2296e-dee7-491b-9214-b665a405006b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e144648-694f-4d42-964a-f53c92f39bce","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e144648-694f-4d42-964a-f53c92f39bce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e144648-694f-4d42-964a-f53c92f39bce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e144648-694f-4d42-964a-f53c92f39bce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0b3df/sub-test-model-f0b3df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0b3df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e144648-694f-4d42-964a-f53c92f39bce","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e144648-694f-4d42-964a-f53c92f39bce","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b536f7"}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e144648-694f-4d42-964a-f53c92f39bce","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e144648-694f-4d42-964a-f53c92f39bce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e144648-694f-4d42-964a-f53c92f39bce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:31:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e144648-694f-4d42-964a-f53c92f39bce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ea79e5ff75df0ae13b3977ac832a9ab63a747005d2a3795f091541120d4d187"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81c8e365e16a2342bec80337e19104c923e6e6508a86edf2c7e5798b1faeed81"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/976b8b51fb932c0c7f2d46dd5b2505dec8d0deae15d0888832006681f2917534"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/345c18bf9c897617eb5d184d782e7d8ec4ba5d23e8c06644e0f524fe5c561bcd"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb4156a0a81c1bb696b210b0eeeb212242216d08d39ea477fa674db2bb26c0f6"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07619266cc80d28d5552797f1179883bdd243aa83c3815a075f2d8e4f7a8d42d"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c584158983f01e24429ef0698f06c6f29c51e3a82f65f8bfb28712e8a68623b"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f8aa8aea7ac9d10b0e3dd3092d48795023e1bef0f18e73c6186305d1a9576a4"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fe9e1678f8533c3632e5a4235329dcafca19cd3ddcb61cb50b8ac7015823147"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51d2ce19f6bf6b1a252cbb7e1c98dcf1a2a406207f048849e980f885c06a048b"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f166b3dbb27ab91dcbb1ea9db63b7ca0c7159cf642a65428004f3fe3c97ffb6e"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2029394cc894f447c93a54e8dd344bbaf9db170d8b816a05241da4d6933c77dc"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1667f8750692d3ba85df1ecb51c111e7bc20c01ba880376ef492372150d04796"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f73d4319d176a89bf7ab3a7680e5df8060daba835b2f0418553ada26205a307"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fdcc938d55cf523028026bb02d5c8315dba406b7a966720a155bb9c2b79b71a0"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0cdd0cbdb8f2a42cb961d094f760fefe79c22a1c87cd6687362885955a32e2e6"}
{"level":"info","ts":"2026-07-22T14:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54"}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"981a864ecdafada82d9bf7ab72b3c056c0e8bb6cba3d8851d5ea6ac32c62b68e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"981a864ecdafada82d9bf7ab72b3c056c0e8bb6cba3d8851d5ea6ac32c62b68e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"981a864ecdafada82d9bf7ab72b3c056c0e8bb6cba3d8851d5ea6ac32c62b68e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"981a864ecdafada82d9bf7ab72b3c056c0e8bb6cba3d8851d5ea6ac32c62b68e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/981a864ecdafada82d9bf7ab72b3c056c0e8bb6cba3d8851d5ea6ac32c62b68e"}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"981a864ecdafada82d9bf7ab72b3c056c0e8bb6cba3d8851d5ea6ac32c62b68e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/981a864ecdafada82d9bf7ab72b3c056c0e8bb6cba3d8851d5ea6ac32c62b68e"}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"981a864ecdafada82d9bf7ab72b3c056c0e8bb6cba3d8851d5ea6ac32c62b68e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["981a864ecdafada82d9bf7ab72b3c056c0e8bb6cba3d8851d5ea6ac32c62b68e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"981a864ecdafada82d9bf7ab72b3c056c0e8bb6cba3d8851d5ea6ac32c62b68e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b16120597ba786e69e5a9adf22a2caae1a70ec3ad0a2f803b2370bbeda387dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b16120597ba786e69e5a9adf22a2caae1a70ec3ad0a2f803b2370bbeda387dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"981a864ecdafada82d9bf7ab72b3c056c0e8bb6cba3d8851d5ea6ac32c62b68e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d815a6a703b8b917ce59b1dd0acb799e67547be2e57ab4cf7c49f0d5e72e53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b16120597ba786e69e5a9adf22a2caae1a70ec3ad0a2f803b2370bbeda387dc"}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d815a6a703b8b917ce59b1dd0acb799e67547be2e57ab4cf7c49f0d5e72e53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b16120597ba786e69e5a9adf22a2caae1a70ec3ad0a2f803b2370bbeda387dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b16120597ba786e69e5a9adf22a2caae1a70ec3ad0a2f803b2370bbeda387dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/981a864ecdafada82d9bf7ab72b3c056c0e8bb6cba3d8851d5ea6ac32c62b68e"}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b16120597ba786e69e5a9adf22a2caae1a70ec3ad0a2f803b2370bbeda387dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d815a6a703b8b917ce59b1dd0acb799e67547be2e57ab4cf7c49f0d5e72e53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d815a6a703b8b917ce59b1dd0acb799e67547be2e57ab4cf7c49f0d5e72e53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b16120597ba786e69e5a9adf22a2caae1a70ec3ad0a2f803b2370bbeda387dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84d815a6a703b8b917ce59b1dd0acb799e67547be2e57ab4cf7c49f0d5e72e53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d815a6a703b8b917ce59b1dd0acb799e67547be2e57ab4cf7c49f0d5e72e53"}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d815a6a703b8b917ce59b1dd0acb799e67547be2e57ab4cf7c49f0d5e72e53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84d815a6a703b8b917ce59b1dd0acb799e67547be2e57ab4cf7c49f0d5e72e53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d815a6a703b8b917ce59b1dd0acb799e67547be2e57ab4cf7c49f0d5e72e53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84d815a6a703b8b917ce59b1dd0acb799e67547be2e57ab4cf7c49f0d5e72e53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b16120597ba786e69e5a9adf22a2caae1a70ec3ad0a2f803b2370bbeda387dc"}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d815a6a703b8b917ce59b1dd0acb799e67547be2e57ab4cf7c49f0d5e72e53"}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6"}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6"}
{"level":"debug","ts":"2026-07-22T14:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e28aab0b842ecf1e939ae29fc98e52f91c08a9b58a9b98b17b76a55b023f7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e28aab0b842ecf1e939ae29fc98e52f91c08a9b58a9b98b17b76a55b023f7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e28aab0b842ecf1e939ae29fc98e52f91c08a9b58a9b98b17b76a55b023f7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e28aab0b842ecf1e939ae29fc98e52f91c08a9b58a9b98b17b76a55b023f7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e28aab0b842ecf1e939ae29fc98e52f91c08a9b58a9b98b17b76a55b023f7c"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e28aab0b842ecf1e939ae29fc98e52f91c08a9b58a9b98b17b76a55b023f7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e28aab0b842ecf1e939ae29fc98e52f91c08a9b58a9b98b17b76a55b023f7c"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e28aab0b842ecf1e939ae29fc98e52f91c08a9b58a9b98b17b76a55b023f7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3e28aab0b842ecf1e939ae29fc98e52f91c08a9b58a9b98b17b76a55b023f7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e28aab0b842ecf1e939ae29fc98e52f91c08a9b58a9b98b17b76a55b023f7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e28aab0b842ecf1e939ae29fc98e52f91c08a9b58a9b98b17b76a55b023f7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e28aab0b842ecf1e939ae29fc98e52f91c08a9b58a9b98b17b76a55b023f7c"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a64f6a968be654027056068bee2de254e51d910b7cb83334c4443b6783c9fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a64f6a968be654027056068bee2de254e51d910b7cb83334c4443b6783c9fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a64f6a968be654027056068bee2de254e51d910b7cb83334c4443b6783c9fc"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a64f6a968be654027056068bee2de254e51d910b7cb83334c4443b6783c9fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66a64f6a968be654027056068bee2de254e51d910b7cb83334c4443b6783c9fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a64f6a968be654027056068bee2de254e51d910b7cb83334c4443b6783c9fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a64f6a968be654027056068bee2de254e51d910b7cb83334c4443b6783c9fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a64f6a968be654027056068bee2de254e51d910b7cb83334c4443b6783c9fc"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc"}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e567f0cb4290309a47a31cc1a45f7a44c2c484f1808ed6a04ba8a6ce913288f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e567f0cb4290309a47a31cc1a45f7a44c2c484f1808ed6a04ba8a6ce913288f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"754479d45ac400b8de6fc25364f272e2628897506677bddf6c35fa0efd91ac55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"754479d45ac400b8de6fc25364f272e2628897506677bddf6c35fa0efd91ac55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e567f0cb4290309a47a31cc1a45f7a44c2c484f1808ed6a04ba8a6ce913288f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"053f775b319b4e95366deb5324700e415d43bfb353b1e4ff1ea42ffc5049a4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e567f0cb4290309a47a31cc1a45f7a44c2c484f1808ed6a04ba8a6ce913288f"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"053f775b319b4e95366deb5324700e415d43bfb353b1e4ff1ea42ffc5049a4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754479d45ac400b8de6fc25364f272e2628897506677bddf6c35fa0efd91ac55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754479d45ac400b8de6fc25364f272e2628897506677bddf6c35fa0efd91ac55"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/053f775b319b4e95366deb5324700e415d43bfb353b1e4ff1ea42ffc5049a4fb"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e567f0cb4290309a47a31cc1a45f7a44c2c484f1808ed6a04ba8a6ce913288f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e567f0cb4290309a47a31cc1a45f7a44c2c484f1808ed6a04ba8a6ce913288f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e567f0cb4290309a47a31cc1a45f7a44c2c484f1808ed6a04ba8a6ce913288f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20749fdfa69e9ef72a579489a5cc735400731069dc7cc3920a3bb4fb6faf4c8c"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e567f0cb4290309a47a31cc1a45f7a44c2c484f1808ed6a04ba8a6ce913288f"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20749fdfa69e9ef72a579489a5cc735400731069dc7cc3920a3bb4fb6faf4c8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20749fdfa69e9ef72a579489a5cc735400731069dc7cc3920a3bb4fb6faf4c8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20749fdfa69e9ef72a579489a5cc735400731069dc7cc3920a3bb4fb6faf4c8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"053f775b319b4e95366deb5324700e415d43bfb353b1e4ff1ea42ffc5049a4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["053f775b319b4e95366deb5324700e415d43bfb353b1e4ff1ea42ffc5049a4fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20749fdfa69e9ef72a579489a5cc735400731069dc7cc3920a3bb4fb6faf4c8c"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"053f775b319b4e95366deb5324700e415d43bfb353b1e4ff1ea42ffc5049a4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/053f775b319b4e95366deb5324700e415d43bfb353b1e4ff1ea42ffc5049a4fb"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"754479d45ac400b8de6fc25364f272e2628897506677bddf6c35fa0efd91ac55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["754479d45ac400b8de6fc25364f272e2628897506677bddf6c35fa0efd91ac55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"754479d45ac400b8de6fc25364f272e2628897506677bddf6c35fa0efd91ac55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754479d45ac400b8de6fc25364f272e2628897506677bddf6c35fa0efd91ac55"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e567f0cb4290309a47a31cc1a45f7a44c2c484f1808ed6a04ba8a6ce913288f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20749fdfa69e9ef72a579489a5cc735400731069dc7cc3920a3bb4fb6faf4c8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"053f775b319b4e95366deb5324700e415d43bfb353b1e4ff1ea42ffc5049a4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754479d45ac400b8de6fc25364f272e2628897506677bddf6c35fa0efd91ac55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"}
{"level":"error","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39354","PortSpecifier":{"PortValue":39354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66abaecb-8189-46a6-8b3b-087508416ed9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39354","PortSpecifier":{"PortValue":39354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730731,"nanos":880434111},"http":{"id":"66abaecb-8189-46a6-8b3b-087508416ed9","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59266","PortSpecifier":{"PortValue":59266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cba79695-a0d0-4f75-8408-a91463840ef4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59266","PortSpecifier":{"PortValue":59266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730731,"nanos":917385628},"http":{"id":"cba79695-a0d0-4f75-8408-a91463840ef4","method":"POST","headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0b3df/rate-test-model-f0b3df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0b3df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63081176-65c7-4cf4-9880-e3694044bd30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39358","PortSpecifier":{"PortValue":39358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63081176-65c7-4cf4-9880-e3694044bd30","method":"POST","path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63081176-65c7-4cf4-9880-e3694044bd30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39358","PortSpecifier":{"PortValue":39358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730731,"nanos":955049846},"http":{"id":"63081176-65c7-4cf4-9880-e3694044bd30","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i\"}"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","subscription":"e2e-rate-iso-a-b41a99","tenant":"e2e-shared-a-7d1f11","userId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\",\"requestedSubscription\":\"e2e-rate-iso-a-b41a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63081176-65c7-4cf4-9880-e3694044bd30","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b41a99"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","selected_subscription":"e2e-rate-iso-a-b41a99","selected_subscription_key":"ai-tenant-e2e-shared-a-7d1f11/e2e-rate-iso-a-b41a99@ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63081176-65c7-4cf4-9880-e3694044bd30","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63081176-65c7-4cf4-9880-e3694044bd30","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39374","PortSpecifier":{"PortValue":39374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae95270b-f6cd-4d50-8b75-62d212384696","method":"POST","path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39374","PortSpecifier":{"PortValue":39374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730733,"nanos":14307262},"http":{"id":"ae95270b-f6cd-4d50-8b75-62d212384696","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i"}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i\"}"}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","subscription":"e2e-rate-iso-a-b41a99","tenant":"e2e-shared-a-7d1f11","userId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\",\"requestedSubscription\":\"e2e-rate-iso-a-b41a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"}}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b41a99"}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","selected_subscription":"e2e-rate-iso-a-b41a99","selected_subscription_key":"ai-tenant-e2e-shared-a-7d1f11/e2e-rate-iso-a-b41a99@ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39386","PortSpecifier":{"PortValue":39386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","method":"POST","path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39386","PortSpecifier":{"PortValue":39386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730734,"nanos":48779314},"http":{"id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i"}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i\"}"}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","subscription":"e2e-rate-iso-a-b41a99","tenant":"e2e-shared-a-7d1f11","userId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\",\"requestedSubscription\":\"e2e-rate-iso-a-b41a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"}}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b41a99"}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","selected_subscription":"e2e-rate-iso-a-b41a99","selected_subscription_key":"ai-tenant-e2e-shared-a-7d1f11/e2e-rate-iso-a-b41a99@ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39396","PortSpecifier":{"PortValue":39396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"272297fb-cbe9-47fb-b7af-987327b9509f","method":"POST","path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39396","PortSpecifier":{"PortValue":39396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730735,"nanos":88668681},"http":{"id":"272297fb-cbe9-47fb-b7af-987327b9509f","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i"}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i\"}"}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","subscription":"e2e-rate-iso-a-b41a99","tenant":"e2e-shared-a-7d1f11","userId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\",\"requestedSubscription\":\"e2e-rate-iso-a-b41a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"}}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b41a99"}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","selected_subscription":"e2e-rate-iso-a-b41a99","selected_subscription_key":"ai-tenant-e2e-shared-a-7d1f11/e2e-rate-iso-a-b41a99@ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39410","PortSpecifier":{"PortValue":39410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","method":"POST","path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39410","PortSpecifier":{"PortValue":39410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730736,"nanos":124508710},"http":{"id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i"}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i\"}"}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","subscription":"e2e-rate-iso-a-b41a99","tenant":"e2e-shared-a-7d1f11","userId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\",\"requestedSubscription\":\"e2e-rate-iso-a-b41a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"}}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b41a99"}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","selected_subscription":"e2e-rate-iso-a-b41a99","selected_subscription_key":"ai-tenant-e2e-shared-a-7d1f11/e2e-rate-iso-a-b41a99@ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39416","PortSpecifier":{"PortValue":39416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","method":"POST","path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39416","PortSpecifier":{"PortValue":39416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730737,"nanos":157285855},"http":{"id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i"}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i\"}"}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","subscription":"e2e-rate-iso-a-b41a99","tenant":"e2e-shared-a-7d1f11","userId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\",\"requestedSubscription\":\"e2e-rate-iso-a-b41a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"}}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b41a99"}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","selected_subscription":"e2e-rate-iso-a-b41a99","selected_subscription_key":"ai-tenant-e2e-shared-a-7d1f11/e2e-rate-iso-a-b41a99@ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39424","PortSpecifier":{"PortValue":39424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","method":"POST","path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39424","PortSpecifier":{"PortValue":39424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730738,"nanos":202533657},"http":{"id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i"}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i\"}"}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","subscription":"e2e-rate-iso-a-b41a99","tenant":"e2e-shared-a-7d1f11","userId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\",\"requestedSubscription\":\"e2e-rate-iso-a-b41a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"}}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b41a99"}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","selected_subscription":"e2e-rate-iso-a-b41a99","selected_subscription_key":"ai-tenant-e2e-shared-a-7d1f11/e2e-rate-iso-a-b41a99@ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d091a768-4d54-4229-9905-f39d063fba2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51670","PortSpecifier":{"PortValue":51670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d091a768-4d54-4229-9905-f39d063fba2c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d091a768-4d54-4229-9905-f39d063fba2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51670","PortSpecifier":{"PortValue":51670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730747,"nanos":39069817},"http":{"id":"d091a768-4d54-4229-9905-f39d063fba2c","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d091a768-4d54-4229-9905-f39d063fba2c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d091a768-4d54-4229-9905-f39d063fba2c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d091a768-4d54-4229-9905-f39d063fba2c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d091a768-4d54-4229-9905-f39d063fba2c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d091a768-4d54-4229-9905-f39d063fba2c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d091a768-4d54-4229-9905-f39d063fba2c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d091a768-4d54-4229-9905-f39d063fba2c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d091a768-4d54-4229-9905-f39d063fba2c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d091a768-4d54-4229-9905-f39d063fba2c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d091a768-4d54-4229-9905-f39d063fba2c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d091a768-4d54-4229-9905-f39d063fba2c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54694","PortSpecifier":{"PortValue":54694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54694","PortSpecifier":{"PortValue":54694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730747,"nanos":74178558},"http":{"id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","method":"POST","headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0b3df/rate-test-model-f0b3df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0b3df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51680","PortSpecifier":{"PortValue":51680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24bceabc-d708-4269-9a7c-39aedd0868da","method":"POST","path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51680","PortSpecifier":{"PortValue":51680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730747,"nanos":110131225},"http":{"id":"24bceabc-d708-4269-9a7c-39aedd0868da","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dO4iXnBHedSpJBp7_ak5pnssrRLW3GX1al7CyD0AetFJAU2MCOp9RrQPByM0"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dO4iXnBHedSpJBp7_ak5pnssrRLW3GX1al7CyD0AetFJAU2MCOp9RrQPByM0\"}"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f078bcb-6596-4b39-a8b3-8e0770cc85b3","keyName":"e2e-rate-a-f91385","subscription":"e2e-rate-iso-a-f91385","tenant":"e2e-shared-a-7d1f11","userId":"6f078bcb-6596-4b39-a8b3-8e0770cc85b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\",\"requestedSubscription\":\"e2e-rate-iso-a-f91385\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91385","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f91385"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f078bcb-6596-4b39-a8b3-8e0770cc85b3","keyName":"e2e-rate-a-f91385","selected_subscription":"e2e-rate-iso-a-f91385","selected_subscription_key":"ai-tenant-e2e-shared-a-7d1f11/e2e-rate-iso-a-f91385@ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91385","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51688","PortSpecifier":{"PortValue":51688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","method":"POST","path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51688","PortSpecifier":{"PortValue":51688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730748,"nanos":143767608},"http":{"id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dO4iXnBHedSpJBp7_ak5pnssrRLW3GX1al7CyD0AetFJAU2MCOp9RrQPByM0"}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dO4iXnBHedSpJBp7_ak5pnssrRLW3GX1al7CyD0AetFJAU2MCOp9RrQPByM0\"}"}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f078bcb-6596-4b39-a8b3-8e0770cc85b3","keyName":"e2e-rate-a-f91385","subscription":"e2e-rate-iso-a-f91385","tenant":"e2e-shared-a-7d1f11","userId":"6f078bcb-6596-4b39-a8b3-8e0770cc85b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\",\"requestedSubscription\":\"e2e-rate-iso-a-f91385\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91385","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"}}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f91385"}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f078bcb-6596-4b39-a8b3-8e0770cc85b3","keyName":"e2e-rate-a-f91385","selected_subscription":"e2e-rate-iso-a-f91385","selected_subscription_key":"ai-tenant-e2e-shared-a-7d1f11/e2e-rate-iso-a-f91385@ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91385","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51696","PortSpecifier":{"PortValue":51696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3541ec8-d898-9171-a0bf-923372e4b781","method":"POST","path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51696","PortSpecifier":{"PortValue":51696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730749,"nanos":192446452},"http":{"id":"c3541ec8-d898-9171-a0bf-923372e4b781","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dO4iXnBHedSpJBp7_ak5pnssrRLW3GX1al7CyD0AetFJAU2MCOp9RrQPByM0"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dO4iXnBHedSpJBp7_ak5pnssrRLW3GX1al7CyD0AetFJAU2MCOp9RrQPByM0\"}"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f078bcb-6596-4b39-a8b3-8e0770cc85b3","keyName":"e2e-rate-a-f91385","subscription":"e2e-rate-iso-a-f91385","tenant":"e2e-shared-a-7d1f11","userId":"6f078bcb-6596-4b39-a8b3-8e0770cc85b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\",\"requestedSubscription\":\"e2e-rate-iso-a-f91385\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91385","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f91385"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f078bcb-6596-4b39-a8b3-8e0770cc85b3","keyName":"e2e-rate-a-f91385","selected_subscription":"e2e-rate-iso-a-f91385","selected_subscription_key":"ai-tenant-e2e-shared-a-7d1f11/e2e-rate-iso-a-f91385@ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91385","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54702","PortSpecifier":{"PortValue":54702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","method":"POST","path":"/ai-tenant-e2e-shared-b-f0b3df/rate-test-model-f0b3df/v1/completions","host":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54702","PortSpecifier":{"PortValue":54702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730749,"nanos":226779928},"http":{"id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","method":"POST","headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-f0b3df/rate-test-model-f0b3df/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lqlPlBBfT3WJaAk2_8OLwDYTnnNBNurSrewA2sDFkmUcTs370Hq9IDGhYBgm"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f0b3df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lqlPlBBfT3WJaAk2_8OLwDYTnnNBNurSrewA2sDFkmUcTs370Hq9IDGhYBgm\"}"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0b3df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6eda90bd-6f8c-423f-bb76-610b735091b8","keyName":"e2e-rate-b-f91385","subscription":"e2e-rate-iso-b-f91385","tenant":"e2e-shared-b-f0b3df","userId":"6eda90bd-6f8c-423f-bb76-610b735091b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-f0b3df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-f0b3df/rate-test-model-f0b3df\",\"requestedSubscription\":\"e2e-rate-iso-b-f91385\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0b3df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f0b3df","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f91385","namespace":"ai-tenant-e2e-shared-b-f0b3df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-f0b3df/rate-test-model-f0b3df"}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0b3df/rate-test-model-f0b3df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0b3df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-f91385"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6eda90bd-6f8c-423f-bb76-610b735091b8","keyName":"e2e-rate-b-f91385","selected_subscription":"e2e-rate-iso-b-f91385","selected_subscription_key":"ai-tenant-e2e-shared-b-f0b3df/e2e-rate-iso-b-f91385@ai-tenant-e2e-shared-b-f0b3df/rate-test-model-f0b3df","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f0b3df","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f91385","namespace":"ai-tenant-e2e-shared-b-f0b3df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-f0b3df/rate-test-model-f0b3df"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b16120597ba786e69e5a9adf22a2caae1a70ec3ad0a2f803b2370bbeda387dc"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/053f775b319b4e95366deb5324700e415d43bfb353b1e4ff1ea42ffc5049a4fb"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/981a864ecdafada82d9bf7ab72b3c056c0e8bb6cba3d8851d5ea6ac32c62b68e"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66a64f6a968be654027056068bee2de254e51d910b7cb83334c4443b6783c9fc"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20749fdfa69e9ef72a579489a5cc735400731069dc7cc3920a3bb4fb6faf4c8c"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e567f0cb4290309a47a31cc1a45f7a44c2c484f1808ed6a04ba8a6ce913288f"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3e28aab0b842ecf1e939ae29fc98e52f91c08a9b58a9b98b17b76a55b023f7c"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/754479d45ac400b8de6fc25364f272e2628897506677bddf6c35fa0efd91ac55"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84d815a6a703b8b917ce59b1dd0acb799e67547be2e57ab4cf7c49f0d5e72e53"}