--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-02T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d424150295c640a0c1519054a4572e5ff5d2edf8e5f4a5afbb9d70e3ad812048"}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3"}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3"}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edabb10c4c29a0baee7f04fecacc2f2403ae6e736190d93b493b2c4fb60e74a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3"}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edabb10c4c29a0baee7f04fecacc2f2403ae6e736190d93b493b2c4fb60e74a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edabb10c4c29a0baee7f04fecacc2f2403ae6e736190d93b493b2c4fb60e74a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edabb10c4c29a0baee7f04fecacc2f2403ae6e736190d93b493b2c4fb60e74a9"}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edabb10c4c29a0baee7f04fecacc2f2403ae6e736190d93b493b2c4fb60e74a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edabb10c4c29a0baee7f04fecacc2f2403ae6e736190d93b493b2c4fb60e74a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edabb10c4c29a0baee7f04fecacc2f2403ae6e736190d93b493b2c4fb60e74a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3"}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edabb10c4c29a0baee7f04fecacc2f2403ae6e736190d93b493b2c4fb60e74a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edabb10c4c29a0baee7f04fecacc2f2403ae6e736190d93b493b2c4fb60e74a9"}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edabb10c4c29a0baee7f04fecacc2f2403ae6e736190d93b493b2c4fb60e74a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3"}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edabb10c4c29a0baee7f04fecacc2f2403ae6e736190d93b493b2c4fb60e74a9"}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3"}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3"}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3"}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:31:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:31:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3"}
{"level":"debug","ts":"2026-07-02T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebc7d40a4559ecd05bb5703f83f07e25e594fb9901420f8c29b22c488ad8ccbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebc7d40a4559ecd05bb5703f83f07e25e594fb9901420f8c29b22c488ad8ccbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebc7d40a4559ecd05bb5703f83f07e25e594fb9901420f8c29b22c488ad8ccbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebc7d40a4559ecd05bb5703f83f07e25e594fb9901420f8c29b22c488ad8ccbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebc7d40a4559ecd05bb5703f83f07e25e594fb9901420f8c29b22c488ad8ccbd"}
{"level":"debug","ts":"2026-07-02T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebc7d40a4559ecd05bb5703f83f07e25e594fb9901420f8c29b22c488ad8ccbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebc7d40a4559ecd05bb5703f83f07e25e594fb9901420f8c29b22c488ad8ccbd"}
{"level":"debug","ts":"2026-07-02T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebc7d40a4559ecd05bb5703f83f07e25e594fb9901420f8c29b22c488ad8ccbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebc7d40a4559ecd05bb5703f83f07e25e594fb9901420f8c29b22c488ad8ccbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebc7d40a4559ecd05bb5703f83f07e25e594fb9901420f8c29b22c488ad8ccbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebc7d40a4559ecd05bb5703f83f07e25e594fb9901420f8c29b22c488ad8ccbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebc7d40a4559ecd05bb5703f83f07e25e594fb9901420f8c29b22c488ad8ccbd"}
{"level":"debug","ts":"2026-07-02T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a464f6cd1e0a6de95ea9a9c4e9d76d0484cccd87b36a6c2ca1fe19169d967584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a464f6cd1e0a6de95ea9a9c4e9d76d0484cccd87b36a6c2ca1fe19169d967584","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a464f6cd1e0a6de95ea9a9c4e9d76d0484cccd87b36a6c2ca1fe19169d967584","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a464f6cd1e0a6de95ea9a9c4e9d76d0484cccd87b36a6c2ca1fe19169d967584"}
{"level":"debug","ts":"2026-07-02T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a464f6cd1e0a6de95ea9a9c4e9d76d0484cccd87b36a6c2ca1fe19169d967584","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a464f6cd1e0a6de95ea9a9c4e9d76d0484cccd87b36a6c2ca1fe19169d967584"}
{"level":"debug","ts":"2026-07-02T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a464f6cd1e0a6de95ea9a9c4e9d76d0484cccd87b36a6c2ca1fe19169d967584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a464f6cd1e0a6de95ea9a9c4e9d76d0484cccd87b36a6c2ca1fe19169d967584"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a464f6cd1e0a6de95ea9a9c4e9d76d0484cccd87b36a6c2ca1fe19169d967584","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a464f6cd1e0a6de95ea9a9c4e9d76d0484cccd87b36a6c2ca1fe19169d967584","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a464f6cd1e0a6de95ea9a9c4e9d76d0484cccd87b36a6c2ca1fe19169d967584"}
{"level":"info","ts":"2026-07-02T17:31:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edabb10c4c29a0baee7f04fecacc2f2403ae6e736190d93b493b2c4fb60e74a9"}
{"level":"info","ts":"2026-07-02T17:31:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b1ceeab6c9d23a6e5510d29fdc7581a7461fb862659fd3b5f491dedc3eef9b3"}
{"level":"info","ts":"2026-07-02T17:31:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a464f6cd1e0a6de95ea9a9c4e9d76d0484cccd87b36a6c2ca1fe19169d967584"}
{"level":"info","ts":"2026-07-02T17:31:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebc7d40a4559ecd05bb5703f83f07e25e594fb9901420f8c29b22c488ad8ccbd"}
{"level":"debug","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7"}
{"level":"info","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"info","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7"}
{"level":"debug","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7"}
{"level":"info","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7"}
{"level":"info","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7"}
{"level":"debug","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7"}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be364b3c0ed1621af391c8a8074e6940eb19877bc8cf5bd4fc702511ea49471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be364b3c0ed1621af391c8a8074e6940eb19877bc8cf5bd4fc702511ea49471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be364b3c0ed1621af391c8a8074e6940eb19877bc8cf5bd4fc702511ea49471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be364b3c0ed1621af391c8a8074e6940eb19877bc8cf5bd4fc702511ea49471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be364b3c0ed1621af391c8a8074e6940eb19877bc8cf5bd4fc702511ea49471"}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be364b3c0ed1621af391c8a8074e6940eb19877bc8cf5bd4fc702511ea49471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be364b3c0ed1621af391c8a8074e6940eb19877bc8cf5bd4fc702511ea49471"}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be364b3c0ed1621af391c8a8074e6940eb19877bc8cf5bd4fc702511ea49471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9be364b3c0ed1621af391c8a8074e6940eb19877bc8cf5bd4fc702511ea49471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be364b3c0ed1621af391c8a8074e6940eb19877bc8cf5bd4fc702511ea49471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be364b3c0ed1621af391c8a8074e6940eb19877bc8cf5bd4fc702511ea49471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be364b3c0ed1621af391c8a8074e6940eb19877bc8cf5bd4fc702511ea49471"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e"}
{"level":"error","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e"}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa"}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af2c383bd39ad02921a821479df7d769ecc6fb2b8f9265045988f2574bf4471a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af2c383bd39ad02921a821479df7d769ecc6fb2b8f9265045988f2574bf4471a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af2c383bd39ad02921a821479df7d769ecc6fb2b8f9265045988f2574bf4471a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af2c383bd39ad02921a821479df7d769ecc6fb2b8f9265045988f2574bf4471a"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af2c383bd39ad02921a821479df7d769ecc6fb2b8f9265045988f2574bf4471a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af2c383bd39ad02921a821479df7d769ecc6fb2b8f9265045988f2574bf4471a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af2c383bd39ad02921a821479df7d769ecc6fb2b8f9265045988f2574bf4471a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af2c383bd39ad02921a821479df7d769ecc6fb2b8f9265045988f2574bf4471a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af2c383bd39ad02921a821479df7d769ecc6fb2b8f9265045988f2574bf4471a"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb59fdbe48ea238d3c91fd8c4214173436d8c7543902fbb8eba9828c8936bda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb59fdbe48ea238d3c91fd8c4214173436d8c7543902fbb8eba9828c8936bda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af2c383bd39ad02921a821479df7d769ecc6fb2b8f9265045988f2574bf4471a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb59fdbe48ea238d3c91fd8c4214173436d8c7543902fbb8eba9828c8936bda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e"}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb59fdbe48ea238d3c91fd8c4214173436d8c7543902fbb8eba9828c8936bda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb59fdbe48ea238d3c91fd8c4214173436d8c7543902fbb8eba9828c8936bda"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb59fdbe48ea238d3c91fd8c4214173436d8c7543902fbb8eba9828c8936bda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb59fdbe48ea238d3c91fd8c4214173436d8c7543902fbb8eba9828c8936bda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb59fdbe48ea238d3c91fd8c4214173436d8c7543902fbb8eba9828c8936bda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af2c383bd39ad02921a821479df7d769ecc6fb2b8f9265045988f2574bf4471a"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb59fdbe48ea238d3c91fd8c4214173436d8c7543902fbb8eba9828c8936bda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60162d5284135ea1bda7e6d982f582a6be980796d07f5e4ea8f8f27e6f57e7b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60162d5284135ea1bda7e6d982f582a6be980796d07f5e4ea8f8f27e6f57e7b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb59fdbe48ea238d3c91fd8c4214173436d8c7543902fbb8eba9828c8936bda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60162d5284135ea1bda7e6d982f582a6be980796d07f5e4ea8f8f27e6f57e7b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e"}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60162d5284135ea1bda7e6d982f582a6be980796d07f5e4ea8f8f27e6f57e7b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb59fdbe48ea238d3c91fd8c4214173436d8c7543902fbb8eba9828c8936bda"}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60162d5284135ea1bda7e6d982f582a6be980796d07f5e4ea8f8f27e6f57e7b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60162d5284135ea1bda7e6d982f582a6be980796d07f5e4ea8f8f27e6f57e7b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60162d5284135ea1bda7e6d982f582a6be980796d07f5e4ea8f8f27e6f57e7b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60162d5284135ea1bda7e6d982f582a6be980796d07f5e4ea8f8f27e6f57e7b1"}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60162d5284135ea1bda7e6d982f582a6be980796d07f5e4ea8f8f27e6f57e7b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60162d5284135ea1bda7e6d982f582a6be980796d07f5e4ea8f8f27e6f57e7b1"}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c51665fd02976b34319f97458319f0d9fc85b884b588a744105fb43d728d25e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c51665fd02976b34319f97458319f0d9fc85b884b588a744105fb43d728d25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a604f918e68955c5e94edabb4deae430b866d893b5e7565a1824f1d3f7e2e5b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c51665fd02976b34319f97458319f0d9fc85b884b588a744105fb43d728d25e"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a604f918e68955c5e94edabb4deae430b866d893b5e7565a1824f1d3f7e2e5b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c51665fd02976b34319f97458319f0d9fc85b884b588a744105fb43d728d25e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c51665fd02976b34319f97458319f0d9fc85b884b588a744105fb43d728d25e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c51665fd02976b34319f97458319f0d9fc85b884b588a744105fb43d728d25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beff9ca0d3ced1ac297893d471af735adceee4157aafc927e7b7898af13d720d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a604f918e68955c5e94edabb4deae430b866d893b5e7565a1824f1d3f7e2e5b9"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beff9ca0d3ced1ac297893d471af735adceee4157aafc927e7b7898af13d720d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a604f918e68955c5e94edabb4deae430b866d893b5e7565a1824f1d3f7e2e5b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a604f918e68955c5e94edabb4deae430b866d893b5e7565a1824f1d3f7e2e5b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a604f918e68955c5e94edabb4deae430b866d893b5e7565a1824f1d3f7e2e5b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c51665fd02976b34319f97458319f0d9fc85b884b588a744105fb43d728d25e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c51665fd02976b34319f97458319f0d9fc85b884b588a744105fb43d728d25e"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c51665fd02976b34319f97458319f0d9fc85b884b588a744105fb43d728d25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beff9ca0d3ced1ac297893d471af735adceee4157aafc927e7b7898af13d720d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beff9ca0d3ced1ac297893d471af735adceee4157aafc927e7b7898af13d720d"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beff9ca0d3ced1ac297893d471af735adceee4157aafc927e7b7898af13d720d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a604f918e68955c5e94edabb4deae430b866d893b5e7565a1824f1d3f7e2e5b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a604f918e68955c5e94edabb4deae430b866d893b5e7565a1824f1d3f7e2e5b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60162d5284135ea1bda7e6d982f582a6be980796d07f5e4ea8f8f27e6f57e7b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60162d5284135ea1bda7e6d982f582a6be980796d07f5e4ea8f8f27e6f57e7b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a604f918e68955c5e94edabb4deae430b866d893b5e7565a1824f1d3f7e2e5b9"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60162d5284135ea1bda7e6d982f582a6be980796d07f5e4ea8f8f27e6f57e7b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c51665fd02976b34319f97458319f0d9fc85b884b588a744105fb43d728d25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beff9ca0d3ced1ac297893d471af735adceee4157aafc927e7b7898af13d720d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beff9ca0d3ced1ac297893d471af735adceee4157aafc927e7b7898af13d720d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beff9ca0d3ced1ac297893d471af735adceee4157aafc927e7b7898af13d720d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"447fe962993348bbbf4d7ab65232069714ffdce1d155677e6b28f1cb5778b733","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c51665fd02976b34319f97458319f0d9fc85b884b588a744105fb43d728d25e"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"447fe962993348bbbf4d7ab65232069714ffdce1d155677e6b28f1cb5778b733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a604f918e68955c5e94edabb4deae430b866d893b5e7565a1824f1d3f7e2e5b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a604f918e68955c5e94edabb4deae430b866d893b5e7565a1824f1d3f7e2e5b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a604f918e68955c5e94edabb4deae430b866d893b5e7565a1824f1d3f7e2e5b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bbb8cf5730c32e2e236b3292ec7411b756c84a10c462605def5f8bef020e573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beff9ca0d3ced1ac297893d471af735adceee4157aafc927e7b7898af13d720d"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bbb8cf5730c32e2e236b3292ec7411b756c84a10c462605def5f8bef020e573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60162d5284135ea1bda7e6d982f582a6be980796d07f5e4ea8f8f27e6f57e7b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c51665fd02976b34319f97458319f0d9fc85b884b588a744105fb43d728d25e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c51665fd02976b34319f97458319f0d9fc85b884b588a744105fb43d728d25e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c51665fd02976b34319f97458319f0d9fc85b884b588a744105fb43d728d25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beff9ca0d3ced1ac297893d471af735adceee4157aafc927e7b7898af13d720d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"447fe962993348bbbf4d7ab65232069714ffdce1d155677e6b28f1cb5778b733","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/447fe962993348bbbf4d7ab65232069714ffdce1d155677e6b28f1cb5778b733"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"447fe962993348bbbf4d7ab65232069714ffdce1d155677e6b28f1cb5778b733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a604f918e68955c5e94edabb4deae430b866d893b5e7565a1824f1d3f7e2e5b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bbb8cf5730c32e2e236b3292ec7411b756c84a10c462605def5f8bef020e573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bbb8cf5730c32e2e236b3292ec7411b756c84a10c462605def5f8bef020e573"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bbb8cf5730c32e2e236b3292ec7411b756c84a10c462605def5f8bef020e573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c51665fd02976b34319f97458319f0d9fc85b884b588a744105fb43d728d25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"447fe962993348bbbf4d7ab65232069714ffdce1d155677e6b28f1cb5778b733","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["447fe962993348bbbf4d7ab65232069714ffdce1d155677e6b28f1cb5778b733"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"447fe962993348bbbf4d7ab65232069714ffdce1d155677e6b28f1cb5778b733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a604f918e68955c5e94edabb4deae430b866d893b5e7565a1824f1d3f7e2e5b9"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bbb8cf5730c32e2e236b3292ec7411b756c84a10c462605def5f8bef020e573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bbb8cf5730c32e2e236b3292ec7411b756c84a10c462605def5f8bef020e573"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bbb8cf5730c32e2e236b3292ec7411b756c84a10c462605def5f8bef020e573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60162d5284135ea1bda7e6d982f582a6be980796d07f5e4ea8f8f27e6f57e7b1"}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"447fe962993348bbbf4d7ab65232069714ffdce1d155677e6b28f1cb5778b733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bbb8cf5730c32e2e236b3292ec7411b756c84a10c462605def5f8bef020e573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c51665fd02976b34319f97458319f0d9fc85b884b588a744105fb43d728d25e"}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/447fe962993348bbbf4d7ab65232069714ffdce1d155677e6b28f1cb5778b733"}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d075de1d90202e0559ac9e4302fe4510ad136b786ec34efd68cb722865272c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26"}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d075de1d90202e0559ac9e4302fe4510ad136b786ec34efd68cb722865272c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d075de1d90202e0559ac9e4302fe4510ad136b786ec34efd68cb722865272c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f38232842f392274142f577a910e7d36a11783b1d4cef62c728f3a52c6de877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bbb8cf5730c32e2e236b3292ec7411b756c84a10c462605def5f8bef020e573"}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f38232842f392274142f577a910e7d36a11783b1d4cef62c728f3a52c6de877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:32:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2"}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d075de1d90202e0559ac9e4302fe4510ad136b786ec34efd68cb722865272c18"}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d075de1d90202e0559ac9e4302fe4510ad136b786ec34efd68cb722865272c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d075de1d90202e0559ac9e4302fe4510ad136b786ec34efd68cb722865272c18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21"}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f38232842f392274142f577a910e7d36a11783b1d4cef62c728f3a52c6de877"}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d075de1d90202e0559ac9e4302fe4510ad136b786ec34efd68cb722865272c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b0453ced2f23b10c6226b6da73ed69fbafd62f1483aecf9feed679e8ddde61"}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2"}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f38232842f392274142f577a910e7d36a11783b1d4cef62c728f3a52c6de877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f38232842f392274142f577a910e7d36a11783b1d4cef62c728f3a52c6de877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dd4ff50bf89ed50e3d24b78847a6e42a42e23c2f89eaa3cd775bedc18323a69"}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26"}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f38232842f392274142f577a910e7d36a11783b1d4cef62c728f3a52c6de877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b0453ced2f23b10c6226b6da73ed69fbafd62f1483aecf9feed679e8ddde61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56b0453ced2f23b10c6226b6da73ed69fbafd62f1483aecf9feed679e8ddde61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d075de1d90202e0559ac9e4302fe4510ad136b786ec34efd68cb722865272c18"}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f38232842f392274142f577a910e7d36a11783b1d4cef62c728f3a52c6de877"}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b0453ced2f23b10c6226b6da73ed69fbafd62f1483aecf9feed679e8ddde61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b0453ced2f23b10c6226b6da73ed69fbafd62f1483aecf9feed679e8ddde61"}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2"}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dd4ff50bf89ed50e3d24b78847a6e42a42e23c2f89eaa3cd775bedc18323a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:32:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dd4ff50bf89ed50e3d24b78847a6e42a42e23c2f89eaa3cd775bedc18323a69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21"}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dd4ff50bf89ed50e3d24b78847a6e42a42e23c2f89eaa3cd775bedc18323a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d075de1d90202e0559ac9e4302fe4510ad136b786ec34efd68cb722865272c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f38232842f392274142f577a910e7d36a11783b1d4cef62c728f3a52c6de877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b0453ced2f23b10c6226b6da73ed69fbafd62f1483aecf9feed679e8ddde61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dd4ff50bf89ed50e3d24b78847a6e42a42e23c2f89eaa3cd775bedc18323a69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dd4ff50bf89ed50e3d24b78847a6e42a42e23c2f89eaa3cd775bedc18323a69"}
{"level":"info","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"915746fd-edc5-4b9d-9690-ea95d5863a96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32792","PortSpecifier":{"PortValue":32792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"915746fd-edc5-4b9d-9690-ea95d5863a96","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"915746fd-edc5-4b9d-9690-ea95d5863a96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32792","PortSpecifier":{"PortValue":32792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013578,"nanos":90518042},"http":{"id":"915746fd-edc5-4b9d-9690-ea95d5863a96","method":"POST","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"915746fd-edc5-4b9d-9690-ea95d5863a96","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"915746fd-edc5-4b9d-9690-ea95d5863a96","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"915746fd-edc5-4b9d-9690-ea95d5863a96","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"915746fd-edc5-4b9d-9690-ea95d5863a96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"915746fd-edc5-4b9d-9690-ea95d5863a96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"915746fd-edc5-4b9d-9690-ea95d5863a96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/auth-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"915746fd-edc5-4b9d-9690-ea95d5863a96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"915746fd-edc5-4b9d-9690-ea95d5863a96","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"915746fd-edc5-4b9d-9690-ea95d5863a96","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"915746fd-edc5-4b9d-9690-ea95d5863a96","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"915746fd-edc5-4b9d-9690-ea95d5863a96","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2aadfaad-c689-4bdd-b947-6404f9b42f3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58030","PortSpecifier":{"PortValue":58030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2aadfaad-c689-4bdd-b947-6404f9b42f3a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2aadfaad-c689-4bdd-b947-6404f9b42f3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58030","PortSpecifier":{"PortValue":58030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013578,"nanos":157639811},"http":{"id":"2aadfaad-c689-4bdd-b947-6404f9b42f3a","method":"POST","headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2aadfaad-c689-4bdd-b947-6404f9b42f3a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2aadfaad-c689-4bdd-b947-6404f9b42f3a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2aadfaad-c689-4bdd-b947-6404f9b42f3a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2aadfaad-c689-4bdd-b947-6404f9b42f3a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2aadfaad-c689-4bdd-b947-6404f9b42f3a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2aadfaad-c689-4bdd-b947-6404f9b42f3a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4421aa/auth-test-model-4421aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2aadfaad-c689-4bdd-b947-6404f9b42f3a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2aadfaad-c689-4bdd-b947-6404f9b42f3a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2aadfaad-c689-4bdd-b947-6404f9b42f3a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2aadfaad-c689-4bdd-b947-6404f9b42f3a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2aadfaad-c689-4bdd-b947-6404f9b42f3a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac2f66ea-7cdb-45a0-835c-13e6864e7184","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32796","PortSpecifier":{"PortValue":32796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ac2f66ea-7cdb-45a0-835c-13e6864e7184","method":"GET","path":"/maas-api/v1/api-keys/91616884-868b-4a77-bc53-f7ba250b8ea4","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac2f66ea-7cdb-45a0-835c-13e6864e7184","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32796","PortSpecifier":{"PortValue":32796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013578,"nanos":248252106},"http":{"id":"ac2f66ea-7cdb-45a0-835c-13e6864e7184","method":"GET","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/91616884-868b-4a77-bc53-f7ba250b8ea4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ac2f66ea-7cdb-45a0-835c-13e6864e7184","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ac2f66ea-7cdb-45a0-835c-13e6864e7184","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ac2f66ea-7cdb-45a0-835c-13e6864e7184","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/91616884-868b-4a77-bc53-f7ba250b8ea4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac2f66ea-7cdb-45a0-835c-13e6864e7184","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac2f66ea-7cdb-45a0-835c-13e6864e7184","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac2f66ea-7cdb-45a0-835c-13e6864e7184","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/auth-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ac2f66ea-7cdb-45a0-835c-13e6864e7184","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac2f66ea-7cdb-45a0-835c-13e6864e7184","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac2f66ea-7cdb-45a0-835c-13e6864e7184","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac2f66ea-7cdb-45a0-835c-13e6864e7184","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac2f66ea-7cdb-45a0-835c-13e6864e7184","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf758485-366e-4ef7-9b9a-51e1ec02c7dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58042","PortSpecifier":{"PortValue":58042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf758485-366e-4ef7-9b9a-51e1ec02c7dd","method":"GET","path":"/maas-api/v1/api-keys/58ab65cf-462d-44b6-8255-d315cd19f19d","host":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf758485-366e-4ef7-9b9a-51e1ec02c7dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58042","PortSpecifier":{"PortValue":58042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013578,"nanos":295213043},"http":{"id":"bf758485-366e-4ef7-9b9a-51e1ec02c7dd","method":"GET","headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/58ab65cf-462d-44b6-8255-d315cd19f19d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bf758485-366e-4ef7-9b9a-51e1ec02c7dd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf758485-366e-4ef7-9b9a-51e1ec02c7dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf758485-366e-4ef7-9b9a-51e1ec02c7dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/58ab65cf-462d-44b6-8255-d315cd19f19d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf758485-366e-4ef7-9b9a-51e1ec02c7dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf758485-366e-4ef7-9b9a-51e1ec02c7dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf758485-366e-4ef7-9b9a-51e1ec02c7dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4421aa/auth-test-model-4421aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf758485-366e-4ef7-9b9a-51e1ec02c7dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf758485-366e-4ef7-9b9a-51e1ec02c7dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf758485-366e-4ef7-9b9a-51e1ec02c7dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf758485-366e-4ef7-9b9a-51e1ec02c7dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:32:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf758485-366e-4ef7-9b9a-51e1ec02c7dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0362f207-e642-431b-b887-9b498156e536","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54746","PortSpecifier":{"PortValue":54746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0362f207-e642-431b-b887-9b498156e536","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0362f207-e642-431b-b887-9b498156e536","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54746","PortSpecifier":{"PortValue":54746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013593,"nanos":242002249},"http":{"id":"0362f207-e642-431b-b887-9b498156e536","method":"POST","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0362f207-e642-431b-b887-9b498156e536","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0362f207-e642-431b-b887-9b498156e536","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0362f207-e642-431b-b887-9b498156e536","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0362f207-e642-431b-b887-9b498156e536","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0362f207-e642-431b-b887-9b498156e536","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0362f207-e642-431b-b887-9b498156e536","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/auth-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0362f207-e642-431b-b887-9b498156e536","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0362f207-e642-431b-b887-9b498156e536","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0362f207-e642-431b-b887-9b498156e536","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0362f207-e642-431b-b887-9b498156e536","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0362f207-e642-431b-b887-9b498156e536","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a58f8302-1828-4dc2-a0ce-2ea7d03fab02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41414","PortSpecifier":{"PortValue":41414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a58f8302-1828-4dc2-a0ce-2ea7d03fab02","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a58f8302-1828-4dc2-a0ce-2ea7d03fab02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41414","PortSpecifier":{"PortValue":41414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013593,"nanos":283085480},"http":{"id":"a58f8302-1828-4dc2-a0ce-2ea7d03fab02","method":"POST","headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a58f8302-1828-4dc2-a0ce-2ea7d03fab02","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a58f8302-1828-4dc2-a0ce-2ea7d03fab02","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a58f8302-1828-4dc2-a0ce-2ea7d03fab02","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a58f8302-1828-4dc2-a0ce-2ea7d03fab02","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a58f8302-1828-4dc2-a0ce-2ea7d03fab02","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a58f8302-1828-4dc2-a0ce-2ea7d03fab02","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4421aa/auth-test-model-4421aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a58f8302-1828-4dc2-a0ce-2ea7d03fab02","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a58f8302-1828-4dc2-a0ce-2ea7d03fab02","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a58f8302-1828-4dc2-a0ce-2ea7d03fab02","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a58f8302-1828-4dc2-a0ce-2ea7d03fab02","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a58f8302-1828-4dc2-a0ce-2ea7d03fab02","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d2624d7-2c05-43d7-8e16-908703a4e458","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54762","PortSpecifier":{"PortValue":54762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d2624d7-2c05-43d7-8e16-908703a4e458","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d2624d7-2c05-43d7-8e16-908703a4e458","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54762","PortSpecifier":{"PortValue":54762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013593,"nanos":323985731},"http":{"id":"3d2624d7-2c05-43d7-8e16-908703a4e458","method":"GET","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d2624d7-2c05-43d7-8e16-908703a4e458","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-biuCBKDEq93GYBAN_upsPFHanQSWgQwzjuyRcFfUOhgK4XwlzhzPThC8isWj"}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d2624d7-2c05-43d7-8e16-908703a4e458","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-biuCBKDEq93GYBAN_upsPFHanQSWgQwzjuyRcFfUOhgK4XwlzhzPThC8isWj\"}"}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d2624d7-2c05-43d7-8e16-908703a4e458","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"33040acb-75e2-4ae8-aa99-005735e3b128","keyName":"e2e-auth-iso-a-5a8863","subscription":"e2e-auth-iso-1d0cf5","tenant":"e2e-shared-a-a0a2ac","userId":"33040acb-75e2-4ae8-aa99-005735e3b128","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d2624d7-2c05-43d7-8e16-908703a4e458","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d2624d7-2c05-43d7-8e16-908703a4e458","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d2624d7-2c05-43d7-8e16-908703a4e458","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d2624d7-2c05-43d7-8e16-908703a4e458","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/auth-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d2624d7-2c05-43d7-8e16-908703a4e458","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d2624d7-2c05-43d7-8e16-908703a4e458","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d2624d7-2c05-43d7-8e16-908703a4e458","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-1d0cf5"}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d2624d7-2c05-43d7-8e16-908703a4e458","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d2624d7-2c05-43d7-8e16-908703a4e458","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:33:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d2624d7-2c05-43d7-8e16-908703a4e458","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0586b08b-e2c5-4b13-bd9d-228a40a83f55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38634","PortSpecifier":{"PortValue":38634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0586b08b-e2c5-4b13-bd9d-228a40a83f55","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0586b08b-e2c5-4b13-bd9d-228a40a83f55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38634","PortSpecifier":{"PortValue":38634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013610,"nanos":524751537},"http":{"id":"0586b08b-e2c5-4b13-bd9d-228a40a83f55","method":"POST","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0586b08b-e2c5-4b13-bd9d-228a40a83f55","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0586b08b-e2c5-4b13-bd9d-228a40a83f55","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0586b08b-e2c5-4b13-bd9d-228a40a83f55","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0586b08b-e2c5-4b13-bd9d-228a40a83f55","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0586b08b-e2c5-4b13-bd9d-228a40a83f55","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0586b08b-e2c5-4b13-bd9d-228a40a83f55","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/auth-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0586b08b-e2c5-4b13-bd9d-228a40a83f55","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0586b08b-e2c5-4b13-bd9d-228a40a83f55","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0586b08b-e2c5-4b13-bd9d-228a40a83f55","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0586b08b-e2c5-4b13-bd9d-228a40a83f55","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0586b08b-e2c5-4b13-bd9d-228a40a83f55","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"273ba2bb-76b0-4d8f-b33f-f70bcbd9f2e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36850","PortSpecifier":{"PortValue":36850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"273ba2bb-76b0-4d8f-b33f-f70bcbd9f2e4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"273ba2bb-76b0-4d8f-b33f-f70bcbd9f2e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36850","PortSpecifier":{"PortValue":36850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013610,"nanos":569376873},"http":{"id":"273ba2bb-76b0-4d8f-b33f-f70bcbd9f2e4","method":"POST","headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"273ba2bb-76b0-4d8f-b33f-f70bcbd9f2e4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"273ba2bb-76b0-4d8f-b33f-f70bcbd9f2e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"273ba2bb-76b0-4d8f-b33f-f70bcbd9f2e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"273ba2bb-76b0-4d8f-b33f-f70bcbd9f2e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"273ba2bb-76b0-4d8f-b33f-f70bcbd9f2e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"273ba2bb-76b0-4d8f-b33f-f70bcbd9f2e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4421aa/auth-test-model-4421aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"273ba2bb-76b0-4d8f-b33f-f70bcbd9f2e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"273ba2bb-76b0-4d8f-b33f-f70bcbd9f2e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"273ba2bb-76b0-4d8f-b33f-f70bcbd9f2e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"273ba2bb-76b0-4d8f-b33f-f70bcbd9f2e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"273ba2bb-76b0-4d8f-b33f-f70bcbd9f2e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb9ab686-391f-4a30-84c2-2e39408ba921","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36860","PortSpecifier":{"PortValue":36860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb9ab686-391f-4a30-84c2-2e39408ba921","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb9ab686-391f-4a30-84c2-2e39408ba921","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36860","PortSpecifier":{"PortValue":36860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013610,"nanos":611827258},"http":{"id":"bb9ab686-391f-4a30-84c2-2e39408ba921","method":"GET","headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb9ab686-391f-4a30-84c2-2e39408ba921","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10AlhGhxK41BsfWi_DvywDol76q933BhWc43i1Dim2dsCCzxuf4bH6Avgyqm"}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb9ab686-391f-4a30-84c2-2e39408ba921","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4421aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10AlhGhxK41BsfWi_DvywDol76q933BhWc43i1Dim2dsCCzxuf4bH6Avgyqm\"}"}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb9ab686-391f-4a30-84c2-2e39408ba921","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4421aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb9ab686-391f-4a30-84c2-2e39408ba921","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb9ab686-391f-4a30-84c2-2e39408ba921","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"bb9ab686-391f-4a30-84c2-2e39408ba921","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb9ab686-391f-4a30-84c2-2e39408ba921","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-02T17:33:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb9ab686-391f-4a30-84c2-2e39408ba921","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"964fa8ce-c8f0-499f-9fad-9e451e9c92fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52112","PortSpecifier":{"PortValue":52112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"964fa8ce-c8f0-499f-9fad-9e451e9c92fc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"964fa8ce-c8f0-499f-9fad-9e451e9c92fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52112","PortSpecifier":{"PortValue":52112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013625,"nanos":729746225},"http":{"id":"964fa8ce-c8f0-499f-9fad-9e451e9c92fc","method":"POST","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"964fa8ce-c8f0-499f-9fad-9e451e9c92fc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"964fa8ce-c8f0-499f-9fad-9e451e9c92fc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"964fa8ce-c8f0-499f-9fad-9e451e9c92fc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"964fa8ce-c8f0-499f-9fad-9e451e9c92fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"964fa8ce-c8f0-499f-9fad-9e451e9c92fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"964fa8ce-c8f0-499f-9fad-9e451e9c92fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/auth-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"964fa8ce-c8f0-499f-9fad-9e451e9c92fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"964fa8ce-c8f0-499f-9fad-9e451e9c92fc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"964fa8ce-c8f0-499f-9fad-9e451e9c92fc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"964fa8ce-c8f0-499f-9fad-9e451e9c92fc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"964fa8ce-c8f0-499f-9fad-9e451e9c92fc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1118f3b5-af64-4da4-a8af-e700a0f5fc55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41154","PortSpecifier":{"PortValue":41154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1118f3b5-af64-4da4-a8af-e700a0f5fc55","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1118f3b5-af64-4da4-a8af-e700a0f5fc55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41154","PortSpecifier":{"PortValue":41154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013625,"nanos":771293810},"http":{"id":"1118f3b5-af64-4da4-a8af-e700a0f5fc55","method":"POST","headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1118f3b5-af64-4da4-a8af-e700a0f5fc55","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1118f3b5-af64-4da4-a8af-e700a0f5fc55","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1118f3b5-af64-4da4-a8af-e700a0f5fc55","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1118f3b5-af64-4da4-a8af-e700a0f5fc55","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1118f3b5-af64-4da4-a8af-e700a0f5fc55","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1118f3b5-af64-4da4-a8af-e700a0f5fc55","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4421aa/auth-test-model-4421aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1118f3b5-af64-4da4-a8af-e700a0f5fc55","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1118f3b5-af64-4da4-a8af-e700a0f5fc55","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1118f3b5-af64-4da4-a8af-e700a0f5fc55","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1118f3b5-af64-4da4-a8af-e700a0f5fc55","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1118f3b5-af64-4da4-a8af-e700a0f5fc55","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"766d1bea-6fb9-4c0d-8c72-7773cf84e545","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52124","PortSpecifier":{"PortValue":52124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"766d1bea-6fb9-4c0d-8c72-7773cf84e545","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"766d1bea-6fb9-4c0d-8c72-7773cf84e545","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52124","PortSpecifier":{"PortValue":52124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013625,"nanos":823199667},"http":{"id":"766d1bea-6fb9-4c0d-8c72-7773cf84e545","method":"POST","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"766d1bea-6fb9-4c0d-8c72-7773cf84e545","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"766d1bea-6fb9-4c0d-8c72-7773cf84e545","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"766d1bea-6fb9-4c0d-8c72-7773cf84e545","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"766d1bea-6fb9-4c0d-8c72-7773cf84e545","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"766d1bea-6fb9-4c0d-8c72-7773cf84e545","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"766d1bea-6fb9-4c0d-8c72-7773cf84e545","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/auth-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"766d1bea-6fb9-4c0d-8c72-7773cf84e545","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"766d1bea-6fb9-4c0d-8c72-7773cf84e545","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"766d1bea-6fb9-4c0d-8c72-7773cf84e545","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"766d1bea-6fb9-4c0d-8c72-7773cf84e545","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"766d1bea-6fb9-4c0d-8c72-7773cf84e545","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be3d6a67-6583-4721-934a-d22a353fafc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41160","PortSpecifier":{"PortValue":41160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be3d6a67-6583-4721-934a-d22a353fafc4","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be3d6a67-6583-4721-934a-d22a353fafc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41160","PortSpecifier":{"PortValue":41160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013625,"nanos":865900142},"http":{"id":"be3d6a67-6583-4721-934a-d22a353fafc4","method":"POST","headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"be3d6a67-6583-4721-934a-d22a353fafc4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be3d6a67-6583-4721-934a-d22a353fafc4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be3d6a67-6583-4721-934a-d22a353fafc4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be3d6a67-6583-4721-934a-d22a353fafc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be3d6a67-6583-4721-934a-d22a353fafc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be3d6a67-6583-4721-934a-d22a353fafc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4421aa/auth-test-model-4421aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be3d6a67-6583-4721-934a-d22a353fafc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be3d6a67-6583-4721-934a-d22a353fafc4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be3d6a67-6583-4721-934a-d22a353fafc4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be3d6a67-6583-4721-934a-d22a353fafc4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be3d6a67-6583-4721-934a-d22a353fafc4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b2734d4-4c47-43f3-bb85-dd8a68a0f8c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52880","PortSpecifier":{"PortValue":52880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b2734d4-4c47-43f3-bb85-dd8a68a0f8c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b2734d4-4c47-43f3-bb85-dd8a68a0f8c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52880","PortSpecifier":{"PortValue":52880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013641,"nanos":63254964},"http":{"id":"9b2734d4-4c47-43f3-bb85-dd8a68a0f8c7","method":"POST","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b2734d4-4c47-43f3-bb85-dd8a68a0f8c7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b2734d4-4c47-43f3-bb85-dd8a68a0f8c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b2734d4-4c47-43f3-bb85-dd8a68a0f8c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b2734d4-4c47-43f3-bb85-dd8a68a0f8c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b2734d4-4c47-43f3-bb85-dd8a68a0f8c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b2734d4-4c47-43f3-bb85-dd8a68a0f8c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/auth-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b2734d4-4c47-43f3-bb85-dd8a68a0f8c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b2734d4-4c47-43f3-bb85-dd8a68a0f8c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b2734d4-4c47-43f3-bb85-dd8a68a0f8c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b2734d4-4c47-43f3-bb85-dd8a68a0f8c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b2734d4-4c47-43f3-bb85-dd8a68a0f8c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60c8bc90-781a-4060-baef-7d9bb4736842","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48768","PortSpecifier":{"PortValue":48768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60c8bc90-781a-4060-baef-7d9bb4736842","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60c8bc90-781a-4060-baef-7d9bb4736842","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48768","PortSpecifier":{"PortValue":48768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013641,"nanos":104722847},"http":{"id":"60c8bc90-781a-4060-baef-7d9bb4736842","method":"POST","headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60c8bc90-781a-4060-baef-7d9bb4736842","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60c8bc90-781a-4060-baef-7d9bb4736842","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60c8bc90-781a-4060-baef-7d9bb4736842","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60c8bc90-781a-4060-baef-7d9bb4736842","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60c8bc90-781a-4060-baef-7d9bb4736842","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60c8bc90-781a-4060-baef-7d9bb4736842","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4421aa/auth-test-model-4421aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60c8bc90-781a-4060-baef-7d9bb4736842","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60c8bc90-781a-4060-baef-7d9bb4736842","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60c8bc90-781a-4060-baef-7d9bb4736842","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60c8bc90-781a-4060-baef-7d9bb4736842","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60c8bc90-781a-4060-baef-7d9bb4736842","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6c8fa3d-db28-4fef-bbf4-d59b03c0009c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48778","PortSpecifier":{"PortValue":48778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6c8fa3d-db28-4fef-bbf4-d59b03c0009c","method":"GET","path":"/maas-api/v1/api-keys/4ff78433-fa48-464a-bf7b-1ddc0658d557","host":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6c8fa3d-db28-4fef-bbf4-d59b03c0009c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48778","PortSpecifier":{"PortValue":48778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013641,"nanos":147932020},"http":{"id":"f6c8fa3d-db28-4fef-bbf4-d59b03c0009c","method":"GET","headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4ff78433-fa48-464a-bf7b-1ddc0658d557",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f6c8fa3d-db28-4fef-bbf4-d59b03c0009c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6c8fa3d-db28-4fef-bbf4-d59b03c0009c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6c8fa3d-db28-4fef-bbf4-d59b03c0009c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4ff78433-fa48-464a-bf7b-1ddc0658d557",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6c8fa3d-db28-4fef-bbf4-d59b03c0009c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6c8fa3d-db28-4fef-bbf4-d59b03c0009c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6c8fa3d-db28-4fef-bbf4-d59b03c0009c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4421aa/auth-test-model-4421aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f6c8fa3d-db28-4fef-bbf4-d59b03c0009c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6c8fa3d-db28-4fef-bbf4-d59b03c0009c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6c8fa3d-db28-4fef-bbf4-d59b03c0009c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6c8fa3d-db28-4fef-bbf4-d59b03c0009c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6c8fa3d-db28-4fef-bbf4-d59b03c0009c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"014a1525-b034-4d13-bfb7-7b7451d9b89d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52884","PortSpecifier":{"PortValue":52884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"014a1525-b034-4d13-bfb7-7b7451d9b89d","method":"GET","path":"/maas-api/v1/api-keys/4ff78433-fa48-464a-bf7b-1ddc0658d557","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"014a1525-b034-4d13-bfb7-7b7451d9b89d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52884","PortSpecifier":{"PortValue":52884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013641,"nanos":184126045},"http":{"id":"014a1525-b034-4d13-bfb7-7b7451d9b89d","method":"GET","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4ff78433-fa48-464a-bf7b-1ddc0658d557",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"014a1525-b034-4d13-bfb7-7b7451d9b89d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"014a1525-b034-4d13-bfb7-7b7451d9b89d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"014a1525-b034-4d13-bfb7-7b7451d9b89d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4ff78433-fa48-464a-bf7b-1ddc0658d557",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"014a1525-b034-4d13-bfb7-7b7451d9b89d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"014a1525-b034-4d13-bfb7-7b7451d9b89d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"014a1525-b034-4d13-bfb7-7b7451d9b89d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/auth-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"014a1525-b034-4d13-bfb7-7b7451d9b89d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"014a1525-b034-4d13-bfb7-7b7451d9b89d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"014a1525-b034-4d13-bfb7-7b7451d9b89d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"014a1525-b034-4d13-bfb7-7b7451d9b89d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:34:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"014a1525-b034-4d13-bfb7-7b7451d9b89d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4025cd05-063c-46e4-a75c-e4cb8a826cb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39314","PortSpecifier":{"PortValue":39314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4025cd05-063c-46e4-a75c-e4cb8a826cb4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4025cd05-063c-46e4-a75c-e4cb8a826cb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39314","PortSpecifier":{"PortValue":39314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013658,"nanos":467477944},"http":{"id":"4025cd05-063c-46e4-a75c-e4cb8a826cb4","method":"POST","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4025cd05-063c-46e4-a75c-e4cb8a826cb4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4025cd05-063c-46e4-a75c-e4cb8a826cb4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4025cd05-063c-46e4-a75c-e4cb8a826cb4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4025cd05-063c-46e4-a75c-e4cb8a826cb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4025cd05-063c-46e4-a75c-e4cb8a826cb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4025cd05-063c-46e4-a75c-e4cb8a826cb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/auth-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4025cd05-063c-46e4-a75c-e4cb8a826cb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4025cd05-063c-46e4-a75c-e4cb8a826cb4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4025cd05-063c-46e4-a75c-e4cb8a826cb4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4025cd05-063c-46e4-a75c-e4cb8a826cb4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4025cd05-063c-46e4-a75c-e4cb8a826cb4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a094e4d-e391-468e-95b9-881a039fe502","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52278","PortSpecifier":{"PortValue":52278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a094e4d-e391-468e-95b9-881a039fe502","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a094e4d-e391-468e-95b9-881a039fe502","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52278","PortSpecifier":{"PortValue":52278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013658,"nanos":505147487},"http":{"id":"0a094e4d-e391-468e-95b9-881a039fe502","method":"POST","headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0a094e4d-e391-468e-95b9-881a039fe502","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a094e4d-e391-468e-95b9-881a039fe502","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a094e4d-e391-468e-95b9-881a039fe502","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a094e4d-e391-468e-95b9-881a039fe502","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a094e4d-e391-468e-95b9-881a039fe502","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a094e4d-e391-468e-95b9-881a039fe502","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4421aa/auth-test-model-4421aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a094e4d-e391-468e-95b9-881a039fe502","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a094e4d-e391-468e-95b9-881a039fe502","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a094e4d-e391-468e-95b9-881a039fe502","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a094e4d-e391-468e-95b9-881a039fe502","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a094e4d-e391-468e-95b9-881a039fe502","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb8ab5a2-360c-48e2-8c75-fb4261c7010e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39322","PortSpecifier":{"PortValue":39322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb8ab5a2-360c-48e2-8c75-fb4261c7010e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb8ab5a2-360c-48e2-8c75-fb4261c7010e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39322","PortSpecifier":{"PortValue":39322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013658,"nanos":548578684},"http":{"id":"bb8ab5a2-360c-48e2-8c75-fb4261c7010e","method":"POST","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb8ab5a2-360c-48e2-8c75-fb4261c7010e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GfhrrrCJd3z5WfNG_2ng2GAk9pTXWkqDXUeaFVsaeEQppaHVvyVCqaCsBNBb"}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb8ab5a2-360c-48e2-8c75-fb4261c7010e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GfhrrrCJd3z5WfNG_2ng2GAk9pTXWkqDXUeaFVsaeEQppaHVvyVCqaCsBNBb\"}"}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb8ab5a2-360c-48e2-8c75-fb4261c7010e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3d32f985-24d9-4902-a34a-1113480bc63d","keyName":"e2e-auth-iso-a-2e40e5","subscription":"e2e-auth-iso-f510d8","tenant":"e2e-shared-a-a0a2ac","userId":"3d32f985-24d9-4902-a34a-1113480bc63d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb8ab5a2-360c-48e2-8c75-fb4261c7010e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb8ab5a2-360c-48e2-8c75-fb4261c7010e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb8ab5a2-360c-48e2-8c75-fb4261c7010e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb8ab5a2-360c-48e2-8c75-fb4261c7010e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/auth-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb8ab5a2-360c-48e2-8c75-fb4261c7010e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f510d8"}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb8ab5a2-360c-48e2-8c75-fb4261c7010e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb8ab5a2-360c-48e2-8c75-fb4261c7010e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb8ab5a2-360c-48e2-8c75-fb4261c7010e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb8ab5a2-360c-48e2-8c75-fb4261c7010e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:34:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb8ab5a2-360c-48e2-8c75-fb4261c7010e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:34:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afb59fdbe48ea238d3c91fd8c4214173436d8c7543902fbb8eba9828c8936bda"}
{"level":"info","ts":"2026-07-02T17:34:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/156dfdb2a9fd57133504c2bc60b63479cc44e494f2d74e320d28f8911890b1aa"}
{"level":"info","ts":"2026-07-02T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9be364b3c0ed1621af391c8a8074e6940eb19877bc8cf5bd4fc702511ea49471"}
{"level":"info","ts":"2026-07-02T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dd4ff50bf89ed50e3d24b78847a6e42a42e23c2f89eaa3cd775bedc18323a69"}
{"level":"info","ts":"2026-07-02T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d075de1d90202e0559ac9e4302fe4510ad136b786ec34efd68cb722865272c18"}
{"level":"info","ts":"2026-07-02T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af2c383bd39ad02921a821479df7d769ecc6fb2b8f9265045988f2574bf4471a"}
{"level":"info","ts":"2026-07-02T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/beff9ca0d3ced1ac297893d471af735adceee4157aafc927e7b7898af13d720d"}
{"level":"info","ts":"2026-07-02T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bbb8cf5730c32e2e236b3292ec7411b756c84a10c462605def5f8bef020e573"}
{"level":"info","ts":"2026-07-02T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a604f918e68955c5e94edabb4deae430b866d893b5e7565a1824f1d3f7e2e5b9"}
{"level":"info","ts":"2026-07-02T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c51665fd02976b34319f97458319f0d9fc85b884b588a744105fb43d728d25e"}
{"level":"info","ts":"2026-07-02T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36619f71025bc5f1ea8b3c35082143ace61d91dfd0a8814ca0bc1e1f50b363a7"}
{"level":"info","ts":"2026-07-02T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56b0453ced2f23b10c6226b6da73ed69fbafd62f1483aecf9feed679e8ddde61"}
{"level":"info","ts":"2026-07-02T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f38232842f392274142f577a910e7d36a11783b1d4cef62c728f3a52c6de877"}
{"level":"info","ts":"2026-07-02T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6adfc39cd5ac8948e13ed0fdbf98a8aca5d909c3af7c7f364d4cea01335a7d0e"}
{"level":"info","ts":"2026-07-02T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60162d5284135ea1bda7e6d982f582a6be980796d07f5e4ea8f8f27e6f57e7b1"}
{"level":"info","ts":"2026-07-02T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/447fe962993348bbbf4d7ab65232069714ffdce1d155677e6b28f1cb5778b733"}
{"level":"debug","ts":"2026-07-02T17:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14"}
{"level":"debug","ts":"2026-07-02T17:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14"}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14"}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14"}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476"}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14"}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476"}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476"}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d17df5274132ed3ce4c1c6c44aad19ad537c6a437a47402255c4ea93ee090fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d17df5274132ed3ce4c1c6c44aad19ad537c6a437a47402255c4ea93ee090fe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d17df5274132ed3ce4c1c6c44aad19ad537c6a437a47402255c4ea93ee090fe1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476"}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d17df5274132ed3ce4c1c6c44aad19ad537c6a437a47402255c4ea93ee090fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d17df5274132ed3ce4c1c6c44aad19ad537c6a437a47402255c4ea93ee090fe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d17df5274132ed3ce4c1c6c44aad19ad537c6a437a47402255c4ea93ee090fe1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d17df5274132ed3ce4c1c6c44aad19ad537c6a437a47402255c4ea93ee090fe1"}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d17df5274132ed3ce4c1c6c44aad19ad537c6a437a47402255c4ea93ee090fe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d17df5274132ed3ce4c1c6c44aad19ad537c6a437a47402255c4ea93ee090fe1"}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476"}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65dee76996cda2f776f46f37fed90c81aef0cedd55e9574f52f7c882cf69fff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65dee76996cda2f776f46f37fed90c81aef0cedd55e9574f52f7c882cf69fff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65dee76996cda2f776f46f37fed90c81aef0cedd55e9574f52f7c882cf69fff"}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65dee76996cda2f776f46f37fed90c81aef0cedd55e9574f52f7c882cf69fff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a65dee76996cda2f776f46f37fed90c81aef0cedd55e9574f52f7c882cf69fff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65dee76996cda2f776f46f37fed90c81aef0cedd55e9574f52f7c882cf69fff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d17df5274132ed3ce4c1c6c44aad19ad537c6a437a47402255c4ea93ee090fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d17df5274132ed3ce4c1c6c44aad19ad537c6a437a47402255c4ea93ee090fe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e"}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d17df5274132ed3ce4c1c6c44aad19ad537c6a437a47402255c4ea93ee090fe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65dee76996cda2f776f46f37fed90c81aef0cedd55e9574f52f7c882cf69fff"}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65dee76996cda2f776f46f37fed90c81aef0cedd55e9574f52f7c882cf69fff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d17df5274132ed3ce4c1c6c44aad19ad537c6a437a47402255c4ea93ee090fe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e"}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72050d18ff40dd8c599b7422ba9f7b78183f6890a33ba42d308a3c9fb3bebac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d17df5274132ed3ce4c1c6c44aad19ad537c6a437a47402255c4ea93ee090fe1"}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72050d18ff40dd8c599b7422ba9f7b78183f6890a33ba42d308a3c9fb3bebac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72050d18ff40dd8c599b7422ba9f7b78183f6890a33ba42d308a3c9fb3bebac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72050d18ff40dd8c599b7422ba9f7b78183f6890a33ba42d308a3c9fb3bebac9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e"}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72050d18ff40dd8c599b7422ba9f7b78183f6890a33ba42d308a3c9fb3bebac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72050d18ff40dd8c599b7422ba9f7b78183f6890a33ba42d308a3c9fb3bebac9"}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72050d18ff40dd8c599b7422ba9f7b78183f6890a33ba42d308a3c9fb3bebac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72050d18ff40dd8c599b7422ba9f7b78183f6890a33ba42d308a3c9fb3bebac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72050d18ff40dd8c599b7422ba9f7b78183f6890a33ba42d308a3c9fb3bebac9"}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e"}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72050d18ff40dd8c599b7422ba9f7b78183f6890a33ba42d308a3c9fb3bebac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72050d18ff40dd8c599b7422ba9f7b78183f6890a33ba42d308a3c9fb3bebac9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72050d18ff40dd8c599b7422ba9f7b78183f6890a33ba42d308a3c9fb3bebac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72050d18ff40dd8c599b7422ba9f7b78183f6890a33ba42d308a3c9fb3bebac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72050d18ff40dd8c599b7422ba9f7b78183f6890a33ba42d308a3c9fb3bebac9"}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7"}
{"level":"error","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7"}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7"}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"}
{"level":"info","ts":"2026-07-02T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7"}
{"level":"debug","ts":"2026-07-02T17:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0"}
{"level":"debug","ts":"2026-07-02T17:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0"}
{"level":"debug","ts":"2026-07-02T17:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0"}
{"level":"debug","ts":"2026-07-02T17:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0"}
{"level":"debug","ts":"2026-07-02T17:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0"}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0"}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24"}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0"}
{"level":"error","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24"}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ff8233e4242696a53fc876dae5ceb945b0398ae6e94b098c8eaf49b89c50c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ff8233e4242696a53fc876dae5ceb945b0398ae6e94b098c8eaf49b89c50c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ff8233e4242696a53fc876dae5ceb945b0398ae6e94b098c8eaf49b89c50c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ff8233e4242696a53fc876dae5ceb945b0398ae6e94b098c8eaf49b89c50c0"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ff8233e4242696a53fc876dae5ceb945b0398ae6e94b098c8eaf49b89c50c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ff8233e4242696a53fc876dae5ceb945b0398ae6e94b098c8eaf49b89c50c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18ff8233e4242696a53fc876dae5ceb945b0398ae6e94b098c8eaf49b89c50c0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18ff8233e4242696a53fc876dae5ceb945b0398ae6e94b098c8eaf49b89c50c0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ff8233e4242696a53fc876dae5ceb945b0398ae6e94b098c8eaf49b89c50c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ff8233e4242696a53fc876dae5ceb945b0398ae6e94b098c8eaf49b89c50c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ff8233e4242696a53fc876dae5ceb945b0398ae6e94b098c8eaf49b89c50c0"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ff8233e4242696a53fc876dae5ceb945b0398ae6e94b098c8eaf49b89c50c0"}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa04037d9a8adc3a7899b1220cd3ab3af6cf4e415caf4142f59ef4f202c050c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa04037d9a8adc3a7899b1220cd3ab3af6cf4e415caf4142f59ef4f202c050c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ff8233e4242696a53fc876dae5ceb945b0398ae6e94b098c8eaf49b89c50c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18ff8233e4242696a53fc876dae5ceb945b0398ae6e94b098c8eaf49b89c50c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa04037d9a8adc3a7899b1220cd3ab3af6cf4e415caf4142f59ef4f202c050c3"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ff8233e4242696a53fc876dae5ceb945b0398ae6e94b098c8eaf49b89c50c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa04037d9a8adc3a7899b1220cd3ab3af6cf4e415caf4142f59ef4f202c050c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ff8233e4242696a53fc876dae5ceb945b0398ae6e94b098c8eaf49b89c50c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa04037d9a8adc3a7899b1220cd3ab3af6cf4e415caf4142f59ef4f202c050c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa04037d9a8adc3a7899b1220cd3ab3af6cf4e415caf4142f59ef4f202c050c3"}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa04037d9a8adc3a7899b1220cd3ab3af6cf4e415caf4142f59ef4f202c050c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa04037d9a8adc3a7899b1220cd3ab3af6cf4e415caf4142f59ef4f202c050c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ff8233e4242696a53fc876dae5ceb945b0398ae6e94b098c8eaf49b89c50c0"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa04037d9a8adc3a7899b1220cd3ab3af6cf4e415caf4142f59ef4f202c050c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa04037d9a8adc3a7899b1220cd3ab3af6cf4e415caf4142f59ef4f202c050c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa04037d9a8adc3a7899b1220cd3ab3af6cf4e415caf4142f59ef4f202c050c3"}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9413afa5929bd6bbc5c24c8ce191939ce05bca7d7b5ec8290c3c871e32cd7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9413afa5929bd6bbc5c24c8ce191939ce05bca7d7b5ec8290c3c871e32cd7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9413afa5929bd6bbc5c24c8ce191939ce05bca7d7b5ec8290c3c871e32cd7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9413afa5929bd6bbc5c24c8ce191939ce05bca7d7b5ec8290c3c871e32cd7ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9413afa5929bd6bbc5c24c8ce191939ce05bca7d7b5ec8290c3c871e32cd7ed"}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9413afa5929bd6bbc5c24c8ce191939ce05bca7d7b5ec8290c3c871e32cd7ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9413afa5929bd6bbc5c24c8ce191939ce05bca7d7b5ec8290c3c871e32cd7ed"}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9413afa5929bd6bbc5c24c8ce191939ce05bca7d7b5ec8290c3c871e32cd7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9413afa5929bd6bbc5c24c8ce191939ce05bca7d7b5ec8290c3c871e32cd7ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9413afa5929bd6bbc5c24c8ce191939ce05bca7d7b5ec8290c3c871e32cd7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9413afa5929bd6bbc5c24c8ce191939ce05bca7d7b5ec8290c3c871e32cd7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9413afa5929bd6bbc5c24c8ce191939ce05bca7d7b5ec8290c3c871e32cd7ed"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc"}
{"level":"error","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0"}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc"}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0"}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21"}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72050d18ff40dd8c599b7422ba9f7b78183f6890a33ba42d308a3c9fb3bebac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72050d18ff40dd8c599b7422ba9f7b78183f6890a33ba42d308a3c9fb3bebac9"}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e"}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e"}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e"}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e"}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e"}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14"}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65dee76996cda2f776f46f37fed90c81aef0cedd55e9574f52f7c882cf69fff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65dee76996cda2f776f46f37fed90c81aef0cedd55e9574f52f7c882cf69fff"}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d17df5274132ed3ce4c1c6c44aad19ad537c6a437a47402255c4ea93ee090fe1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d17df5274132ed3ce4c1c6c44aad19ad537c6a437a47402255c4ea93ee090fe1"}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"}
{"level":"debug","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7"}
{"level":"debug","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7"}
{"level":"debug","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7"}
{"level":"debug","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476"}
{"level":"info","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7"}
{"level":"info","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7"}
{"level":"debug","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7"}
{"level":"debug","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7"}
{"level":"info","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9bcf61f-0e47-492a-8bd0-ec441fff19fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46172","PortSpecifier":{"PortValue":46172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9bcf61f-0e47-492a-8bd0-ec441fff19fb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9bcf61f-0e47-492a-8bd0-ec441fff19fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46172","PortSpecifier":{"PortValue":46172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013735,"nanos":628266973},"http":{"id":"b9bcf61f-0e47-492a-8bd0-ec441fff19fb","method":"POST","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b9bcf61f-0e47-492a-8bd0-ec441fff19fb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9bcf61f-0e47-492a-8bd0-ec441fff19fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9bcf61f-0e47-492a-8bd0-ec441fff19fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9bcf61f-0e47-492a-8bd0-ec441fff19fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9bcf61f-0e47-492a-8bd0-ec441fff19fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9bcf61f-0e47-492a-8bd0-ec441fff19fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/sub-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9bcf61f-0e47-492a-8bd0-ec441fff19fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9bcf61f-0e47-492a-8bd0-ec441fff19fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9bcf61f-0e47-492a-8bd0-ec441fff19fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9bcf61f-0e47-492a-8bd0-ec441fff19fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9bcf61f-0e47-492a-8bd0-ec441fff19fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0afb01d-f00b-4270-b880-bfb6950c1ddb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32782","PortSpecifier":{"PortValue":32782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0afb01d-f00b-4270-b880-bfb6950c1ddb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0afb01d-f00b-4270-b880-bfb6950c1ddb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32782","PortSpecifier":{"PortValue":32782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013735,"nanos":671185595},"http":{"id":"d0afb01d-f00b-4270-b880-bfb6950c1ddb","method":"POST","headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d0afb01d-f00b-4270-b880-bfb6950c1ddb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0afb01d-f00b-4270-b880-bfb6950c1ddb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0afb01d-f00b-4270-b880-bfb6950c1ddb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0afb01d-f00b-4270-b880-bfb6950c1ddb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0afb01d-f00b-4270-b880-bfb6950c1ddb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0afb01d-f00b-4270-b880-bfb6950c1ddb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4421aa/auth-test-model-4421aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d0afb01d-f00b-4270-b880-bfb6950c1ddb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0afb01d-f00b-4270-b880-bfb6950c1ddb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0afb01d-f00b-4270-b880-bfb6950c1ddb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0afb01d-f00b-4270-b880-bfb6950c1ddb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0afb01d-f00b-4270-b880-bfb6950c1ddb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd3a6602-948a-4138-8518-d1d2f6718b3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46180","PortSpecifier":{"PortValue":46180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd3a6602-948a-4138-8518-d1d2f6718b3d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd3a6602-948a-4138-8518-d1d2f6718b3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46180","PortSpecifier":{"PortValue":46180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013735,"nanos":713657034},"http":{"id":"bd3a6602-948a-4138-8518-d1d2f6718b3d","method":"GET","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd3a6602-948a-4138-8518-d1d2f6718b3d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bfDWOyb4QxDRCIKw_ASohsWbSdikI87nodIj0DCyyr9eSlC1qIjymfM5SlKw"}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bd3a6602-948a-4138-8518-d1d2f6718b3d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bfDWOyb4QxDRCIKw_ASohsWbSdikI87nodIj0DCyyr9eSlC1qIjymfM5SlKw\"}"}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bd3a6602-948a-4138-8518-d1d2f6718b3d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d0c2401-5a51-49dd-b612-b5fbf07c24a2","keyName":"e2e-sub-iso-1d2111","subscription":"e2e-a-only-0f8d1a","tenant":"e2e-shared-a-a0a2ac","userId":"6d0c2401-5a51-49dd-b612-b5fbf07c24a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd3a6602-948a-4138-8518-d1d2f6718b3d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd3a6602-948a-4138-8518-d1d2f6718b3d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd3a6602-948a-4138-8518-d1d2f6718b3d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd3a6602-948a-4138-8518-d1d2f6718b3d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/sub-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd3a6602-948a-4138-8518-d1d2f6718b3d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd3a6602-948a-4138-8518-d1d2f6718b3d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd3a6602-948a-4138-8518-d1d2f6718b3d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd3a6602-948a-4138-8518-d1d2f6718b3d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-0f8d1a"}
{"level":"info","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd3a6602-948a-4138-8518-d1d2f6718b3d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd3a6602-948a-4138-8518-d1d2f6718b3d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e0fdc63-71ba-404a-82ea-599b47345a82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32792","PortSpecifier":{"PortValue":32792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e0fdc63-71ba-404a-82ea-599b47345a82","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e0fdc63-71ba-404a-82ea-599b47345a82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32792","PortSpecifier":{"PortValue":32792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013735,"nanos":759320422},"http":{"id":"4e0fdc63-71ba-404a-82ea-599b47345a82","method":"GET","headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e0fdc63-71ba-404a-82ea-599b47345a82","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-a8mrT4HthwH1WNgy_LTMFOJa599OIosJ6ULBIyGXifdrVNjZyXzCoLH496GP"}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e0fdc63-71ba-404a-82ea-599b47345a82","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4421aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-a8mrT4HthwH1WNgy_LTMFOJa599OIosJ6ULBIyGXifdrVNjZyXzCoLH496GP\"}"}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e0fdc63-71ba-404a-82ea-599b47345a82","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4421aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f1a8b65b-6f05-45ac-bfee-65ed46062111","keyName":"e2e-sub-iso-a7957c","subscription":"e2e-b-only-0f8d1a","tenant":"e2e-shared-b-4421aa","userId":"f1a8b65b-6f05-45ac-bfee-65ed46062111","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e0fdc63-71ba-404a-82ea-599b47345a82","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e0fdc63-71ba-404a-82ea-599b47345a82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e0fdc63-71ba-404a-82ea-599b47345a82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e0fdc63-71ba-404a-82ea-599b47345a82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4421aa/auth-test-model-4421aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e0fdc63-71ba-404a-82ea-599b47345a82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e0fdc63-71ba-404a-82ea-599b47345a82","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e0fdc63-71ba-404a-82ea-599b47345a82","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e0fdc63-71ba-404a-82ea-599b47345a82","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-0f8d1a"}
{"level":"info","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e0fdc63-71ba-404a-82ea-599b47345a82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:35:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e0fdc63-71ba-404a-82ea-599b47345a82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0"}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9413afa5929bd6bbc5c24c8ce191939ce05bca7d7b5ec8290c3c871e32cd7ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9413afa5929bd6bbc5c24c8ce191939ce05bca7d7b5ec8290c3c871e32cd7ed"}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0"}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224"}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224"}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224"}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc"}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224"}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224"}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ff8233e4242696a53fc876dae5ceb945b0398ae6e94b098c8eaf49b89c50c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224"}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ff8233e4242696a53fc876dae5ceb945b0398ae6e94b098c8eaf49b89c50c0"}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224"}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26"}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2"}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24"}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:35:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:35:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2"}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2"}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa04037d9a8adc3a7899b1220cd3ab3af6cf4e415caf4142f59ef4f202c050c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2"}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa04037d9a8adc3a7899b1220cd3ab3af6cf4e415caf4142f59ef4f202c050c3"}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:35:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:35:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2"}
{"level":"info","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c63a701d-1b6f-4d29-b65b-00d1d3979cfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58692","PortSpecifier":{"PortValue":58692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c63a701d-1b6f-4d29-b65b-00d1d3979cfc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c63a701d-1b6f-4d29-b65b-00d1d3979cfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58692","PortSpecifier":{"PortValue":58692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013745,"nanos":727313424},"http":{"id":"c63a701d-1b6f-4d29-b65b-00d1d3979cfc","method":"POST","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c63a701d-1b6f-4d29-b65b-00d1d3979cfc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c63a701d-1b6f-4d29-b65b-00d1d3979cfc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c63a701d-1b6f-4d29-b65b-00d1d3979cfc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c63a701d-1b6f-4d29-b65b-00d1d3979cfc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c63a701d-1b6f-4d29-b65b-00d1d3979cfc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c63a701d-1b6f-4d29-b65b-00d1d3979cfc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/sub-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c63a701d-1b6f-4d29-b65b-00d1d3979cfc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c63a701d-1b6f-4d29-b65b-00d1d3979cfc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c63a701d-1b6f-4d29-b65b-00d1d3979cfc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c63a701d-1b6f-4d29-b65b-00d1d3979cfc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c63a701d-1b6f-4d29-b65b-00d1d3979cfc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea5bbc78-b9b4-49a4-9978-839f1d4a6f58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34264","PortSpecifier":{"PortValue":34264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea5bbc78-b9b4-49a4-9978-839f1d4a6f58","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea5bbc78-b9b4-49a4-9978-839f1d4a6f58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34264","PortSpecifier":{"PortValue":34264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013745,"nanos":764845174},"http":{"id":"ea5bbc78-b9b4-49a4-9978-839f1d4a6f58","method":"POST","headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ea5bbc78-b9b4-49a4-9978-839f1d4a6f58","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea5bbc78-b9b4-49a4-9978-839f1d4a6f58","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea5bbc78-b9b4-49a4-9978-839f1d4a6f58","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea5bbc78-b9b4-49a4-9978-839f1d4a6f58","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea5bbc78-b9b4-49a4-9978-839f1d4a6f58","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea5bbc78-b9b4-49a4-9978-839f1d4a6f58","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4421aa/sub-test-model-4421aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea5bbc78-b9b4-49a4-9978-839f1d4a6f58","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea5bbc78-b9b4-49a4-9978-839f1d4a6f58","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea5bbc78-b9b4-49a4-9978-839f1d4a6f58","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea5bbc78-b9b4-49a4-9978-839f1d4a6f58","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea5bbc78-b9b4-49a4-9978-839f1d4a6f58","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd22cc64-7cf1-4fa2-8889-c666a6579e43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58708","PortSpecifier":{"PortValue":58708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd22cc64-7cf1-4fa2-8889-c666a6579e43","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd22cc64-7cf1-4fa2-8889-c666a6579e43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58708","PortSpecifier":{"PortValue":58708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013745,"nanos":808565461},"http":{"id":"cd22cc64-7cf1-4fa2-8889-c666a6579e43","method":"POST","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd22cc64-7cf1-4fa2-8889-c666a6579e43","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MMd1EKv2zJBGjHTS_3hHw3Yt4vmRbxwQ0301L1kwlB2CLK21C5paPKdsUZXi"}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd22cc64-7cf1-4fa2-8889-c666a6579e43","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MMd1EKv2zJBGjHTS_3hHw3Yt4vmRbxwQ0301L1kwlB2CLK21C5paPKdsUZXi\"}"}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd22cc64-7cf1-4fa2-8889-c666a6579e43","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b65b0f7-a37d-4724-8e82-74acaf1361b1","keyName":"e2e-sub-iso-4ff202","subscription":"e2e-shared-sub-0253c8","tenant":"e2e-shared-a-a0a2ac","userId":"7b65b0f7-a37d-4724-8e82-74acaf1361b1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd22cc64-7cf1-4fa2-8889-c666a6579e43","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd22cc64-7cf1-4fa2-8889-c666a6579e43","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd22cc64-7cf1-4fa2-8889-c666a6579e43","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd22cc64-7cf1-4fa2-8889-c666a6579e43","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/sub-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd22cc64-7cf1-4fa2-8889-c666a6579e43","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd22cc64-7cf1-4fa2-8889-c666a6579e43","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd22cc64-7cf1-4fa2-8889-c666a6579e43","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd22cc64-7cf1-4fa2-8889-c666a6579e43","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-0253c8"}
{"level":"info","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd22cc64-7cf1-4fa2-8889-c666a6579e43","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd22cc64-7cf1-4fa2-8889-c666a6579e43","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a84b69be-b339-4a63-9256-e085fdc1490d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34266","PortSpecifier":{"PortValue":34266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a84b69be-b339-4a63-9256-e085fdc1490d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a84b69be-b339-4a63-9256-e085fdc1490d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34266","PortSpecifier":{"PortValue":34266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013745,"nanos":841278030},"http":{"id":"a84b69be-b339-4a63-9256-e085fdc1490d","method":"POST","headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a84b69be-b339-4a63-9256-e085fdc1490d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YBLh38W6nJAqh7Ho_SdYxoWilsTmJnXGDdEWZcvIZA9aKaYqnzW05FgPoCts"}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a84b69be-b339-4a63-9256-e085fdc1490d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4421aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YBLh38W6nJAqh7Ho_SdYxoWilsTmJnXGDdEWZcvIZA9aKaYqnzW05FgPoCts\"}"}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a84b69be-b339-4a63-9256-e085fdc1490d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4421aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"760872f3-c39d-4d63-b15a-c2a6721e1652","keyName":"e2e-sub-iso-6b912e","subscription":"e2e-shared-sub-0253c8","tenant":"e2e-shared-b-4421aa","userId":"760872f3-c39d-4d63-b15a-c2a6721e1652","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a84b69be-b339-4a63-9256-e085fdc1490d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a84b69be-b339-4a63-9256-e085fdc1490d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a84b69be-b339-4a63-9256-e085fdc1490d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a84b69be-b339-4a63-9256-e085fdc1490d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4421aa/sub-test-model-4421aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a84b69be-b339-4a63-9256-e085fdc1490d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a84b69be-b339-4a63-9256-e085fdc1490d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a84b69be-b339-4a63-9256-e085fdc1490d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-0253c8"}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a84b69be-b339-4a63-9256-e085fdc1490d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a84b69be-b339-4a63-9256-e085fdc1490d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:35:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a84b69be-b339-4a63-9256-e085fdc1490d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a408240cf3db52ed332cfdc909a3c5f8771c6c10fd9519d9c709267692beba24"}
{"level":"info","ts":"2026-07-02T17:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d17df5274132ed3ce4c1c6c44aad19ad537c6a437a47402255c4ea93ee090fe1"}
{"level":"info","ts":"2026-07-02T17:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa04037d9a8adc3a7899b1220cd3ab3af6cf4e415caf4142f59ef4f202c050c3"}
{"level":"info","ts":"2026-07-02T17:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72050d18ff40dd8c599b7422ba9f7b78183f6890a33ba42d308a3c9fb3bebac9"}
{"level":"info","ts":"2026-07-02T17:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18ff8233e4242696a53fc876dae5ceb945b0398ae6e94b098c8eaf49b89c50c0"}
{"level":"info","ts":"2026-07-02T17:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b8e2543b51968375a45ffced06e330283306d81776319ed2f0a1c3a4ef1bd9e"}
{"level":"info","ts":"2026-07-02T17:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fa91cb89d04d669c62035366eb69e4a65028c066cbcd015e5a92737007678f0"}
{"level":"info","ts":"2026-07-02T17:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f9665295bb72122d9e16d6c8cbdf7fc4aec0b4abd6362769692308375d8e4c0"}
{"level":"info","ts":"2026-07-02T17:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/044fcbe7800c4a83427410b482dc772d987b589b6edadb0b6f3a9ac81f0c6ab7"}
{"level":"info","ts":"2026-07-02T17:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d4563925ac6f38fbb74482691905be3bb6e6693a4a6f238d053db1dc8661476"}
{"level":"info","ts":"2026-07-02T17:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a65dee76996cda2f776f46f37fed90c81aef0cedd55e9574f52f7c882cf69fff"}
{"level":"info","ts":"2026-07-02T17:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2713698e14b50f886e8ddccde99bdc502327188fb92d025ac644db1194b3224"}
{"level":"info","ts":"2026-07-02T17:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/479dcbb04c3884c4d7649a9bced138dfe201554128ea614981a76459a54cedbc"}
{"level":"info","ts":"2026-07-02T17:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea13ed346828539dfc4f1d97fb7874716ffc8ae017e86c0855c3f5ed1cd01d14"}
{"level":"info","ts":"2026-07-02T17:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/849e083f2e152d5875b018c11e012ff866b266d16c362ef6135f2d1a6021c990"}
{"level":"info","ts":"2026-07-02T17:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9413afa5929bd6bbc5c24c8ce191939ce05bca7d7b5ec8290c3c871e32cd7ed"}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7"}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7"}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7"}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7"}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896"}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7"}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c7f0f7c0362a9ac78d925dec3be07252f1cd3378a9e2f57a13e70a4f80485db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c7f0f7c0362a9ac78d925dec3be07252f1cd3378a9e2f57a13e70a4f80485db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896"}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c7f0f7c0362a9ac78d925dec3be07252f1cd3378a9e2f57a13e70a4f80485db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c7f0f7c0362a9ac78d925dec3be07252f1cd3378a9e2f57a13e70a4f80485db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c7f0f7c0362a9ac78d925dec3be07252f1cd3378a9e2f57a13e70a4f80485db"}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c7f0f7c0362a9ac78d925dec3be07252f1cd3378a9e2f57a13e70a4f80485db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c7f0f7c0362a9ac78d925dec3be07252f1cd3378a9e2f57a13e70a4f80485db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c7f0f7c0362a9ac78d925dec3be07252f1cd3378a9e2f57a13e70a4f80485db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896"}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c7f0f7c0362a9ac78d925dec3be07252f1cd3378a9e2f57a13e70a4f80485db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"}
{"level":"error","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T17:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c7f0f7c0362a9ac78d925dec3be07252f1cd3378a9e2f57a13e70a4f80485db"}
{"level":"error","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6347bca2603f1825128f439d6ab259028c9530339aeb2d2f56f1457bbbd062ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6347bca2603f1825128f439d6ab259028c9530339aeb2d2f56f1457bbbd062ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6347bca2603f1825128f439d6ab259028c9530339aeb2d2f56f1457bbbd062ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6347bca2603f1825128f439d6ab259028c9530339aeb2d2f56f1457bbbd062ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6347bca2603f1825128f439d6ab259028c9530339aeb2d2f56f1457bbbd062ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6347bca2603f1825128f439d6ab259028c9530339aeb2d2f56f1457bbbd062ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6347bca2603f1825128f439d6ab259028c9530339aeb2d2f56f1457bbbd062ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6347bca2603f1825128f439d6ab259028c9530339aeb2d2f56f1457bbbd062ae"}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6347bca2603f1825128f439d6ab259028c9530339aeb2d2f56f1457bbbd062ae"}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6347bca2603f1825128f439d6ab259028c9530339aeb2d2f56f1457bbbd062ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6347bca2603f1825128f439d6ab259028c9530339aeb2d2f56f1457bbbd062ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6347bca2603f1825128f439d6ab259028c9530339aeb2d2f56f1457bbbd062ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd0ebb99effd126b0a1308e371faa046b704b9b97736ed96995a0a9ac740f9c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd0ebb99effd126b0a1308e371faa046b704b9b97736ed96995a0a9ac740f9c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6347bca2603f1825128f439d6ab259028c9530339aeb2d2f56f1457bbbd062ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd0ebb99effd126b0a1308e371faa046b704b9b97736ed96995a0a9ac740f9c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd0ebb99effd126b0a1308e371faa046b704b9b97736ed96995a0a9ac740f9c1"}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd0ebb99effd126b0a1308e371faa046b704b9b97736ed96995a0a9ac740f9c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd0ebb99effd126b0a1308e371faa046b704b9b97736ed96995a0a9ac740f9c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd0ebb99effd126b0a1308e371faa046b704b9b97736ed96995a0a9ac740f9c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd0ebb99effd126b0a1308e371faa046b704b9b97736ed96995a0a9ac740f9c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6347bca2603f1825128f439d6ab259028c9530339aeb2d2f56f1457bbbd062ae"}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd0ebb99effd126b0a1308e371faa046b704b9b97736ed96995a0a9ac740f9c1"}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d"}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d"}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d"}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d"}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d"}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d"}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d"}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d"}
{"level":"debug","ts":"2026-07-02T17:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3"}
{"level":"debug","ts":"2026-07-02T17:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3"}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3"}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3"}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3"}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5"}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5"}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5"}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5"}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5"}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5"}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5"}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788808dacc2c864a6b48e770dc2a26299582153d863f38d9e6bae4ac1916ded5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5"}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788808dacc2c864a6b48e770dc2a26299582153d863f38d9e6bae4ac1916ded5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788808dacc2c864a6b48e770dc2a26299582153d863f38d9e6bae4ac1916ded5"}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788808dacc2c864a6b48e770dc2a26299582153d863f38d9e6bae4ac1916ded5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["788808dacc2c864a6b48e770dc2a26299582153d863f38d9e6bae4ac1916ded5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788808dacc2c864a6b48e770dc2a26299582153d863f38d9e6bae4ac1916ded5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788808dacc2c864a6b48e770dc2a26299582153d863f38d9e6bae4ac1916ded5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5"}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788808dacc2c864a6b48e770dc2a26299582153d863f38d9e6bae4ac1916ded5"}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5"}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004"}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004"}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004"}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b25fa5c18e9ffa81602439d19d879e77f5274c35ab53bb12018c5d89ca76f349","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b25fa5c18e9ffa81602439d19d879e77f5274c35ab53bb12018c5d89ca76f349","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b25fa5c18e9ffa81602439d19d879e77f5274c35ab53bb12018c5d89ca76f349","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b25fa5c18e9ffa81602439d19d879e77f5274c35ab53bb12018c5d89ca76f349","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b25fa5c18e9ffa81602439d19d879e77f5274c35ab53bb12018c5d89ca76f349"}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b25fa5c18e9ffa81602439d19d879e77f5274c35ab53bb12018c5d89ca76f349","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b25fa5c18e9ffa81602439d19d879e77f5274c35ab53bb12018c5d89ca76f349"}
{"level":"debug","ts":"2026-07-02T17:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b25fa5c18e9ffa81602439d19d879e77f5274c35ab53bb12018c5d89ca76f349","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b25fa5c18e9ffa81602439d19d879e77f5274c35ab53bb12018c5d89ca76f349"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b25fa5c18e9ffa81602439d19d879e77f5274c35ab53bb12018c5d89ca76f349","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b25fa5c18e9ffa81602439d19d879e77f5274c35ab53bb12018c5d89ca76f349","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5493013ff3c00aa6def60fece7795a42f4c009e4e91a08e926c30188543b0e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5493013ff3c00aa6def60fece7795a42f4c009e4e91a08e926c30188543b0e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5493013ff3c00aa6def60fece7795a42f4c009e4e91a08e926c30188543b0e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5493013ff3c00aa6def60fece7795a42f4c009e4e91a08e926c30188543b0e4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b25fa5c18e9ffa81602439d19d879e77f5274c35ab53bb12018c5d89ca76f349"}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5493013ff3c00aa6def60fece7795a42f4c009e4e91a08e926c30188543b0e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5493013ff3c00aa6def60fece7795a42f4c009e4e91a08e926c30188543b0e4e"}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5493013ff3c00aa6def60fece7795a42f4c009e4e91a08e926c30188543b0e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5493013ff3c00aa6def60fece7795a42f4c009e4e91a08e926c30188543b0e4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5493013ff3c00aa6def60fece7795a42f4c009e4e91a08e926c30188543b0e4e"}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5493013ff3c00aa6def60fece7795a42f4c009e4e91a08e926c30188543b0e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5493013ff3c00aa6def60fece7795a42f4c009e4e91a08e926c30188543b0e4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5493013ff3c00aa6def60fece7795a42f4c009e4e91a08e926c30188543b0e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5493013ff3c00aa6def60fece7795a42f4c009e4e91a08e926c30188543b0e4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5493013ff3c00aa6def60fece7795a42f4c009e4e91a08e926c30188543b0e4e"}
{"level":"error","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"}
{"level":"debug","ts":"2026-07-02T17:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"}
{"level":"debug","ts":"2026-07-02T17:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"}
{"level":"debug","ts":"2026-07-02T17:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"}
{"level":"debug","ts":"2026-07-02T17:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896"}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896"}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896"}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896"}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896"}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21"}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"}
{"level":"debug","ts":"2026-07-02T17:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c7f0f7c0362a9ac78d925dec3be07252f1cd3378a9e2f57a13e70a4f80485db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c7f0f7c0362a9ac78d925dec3be07252f1cd3378a9e2f57a13e70a4f80485db"}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7"}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7"}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd0ebb99effd126b0a1308e371faa046b704b9b97736ed96995a0a9ac740f9c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7"}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd0ebb99effd126b0a1308e371faa046b704b9b97736ed96995a0a9ac740f9c1"}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6347bca2603f1825128f439d6ab259028c9530339aeb2d2f56f1457bbbd062ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6347bca2603f1825128f439d6ab259028c9530339aeb2d2f56f1457bbbd062ae"}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d"}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:36:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"}
{"level":"debug","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:37:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:37:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"}
{"level":"debug","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"}
{"level":"debug","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:37:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:37:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:37:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:37:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"}
{"level":"debug","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"}
{"level":"debug","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:37:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:37:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:37:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:37:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b25fa5c18e9ffa81602439d19d879e77f5274c35ab53bb12018c5d89ca76f349","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"}
{"level":"debug","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:37:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:37:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b25fa5c18e9ffa81602439d19d879e77f5274c35ab53bb12018c5d89ca76f349"}
{"level":"info","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:37:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:37:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"}
{"level":"info","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3"}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3"}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3"}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5493013ff3c00aa6def60fece7795a42f4c009e4e91a08e926c30188543b0e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3"}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5493013ff3c00aa6def60fece7795a42f4c009e4e91a08e926c30188543b0e4e"}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3"}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788808dacc2c864a6b48e770dc2a26299582153d863f38d9e6bae4ac1916ded5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788808dacc2c864a6b48e770dc2a26299582153d863f38d9e6bae4ac1916ded5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788808dacc2c864a6b48e770dc2a26299582153d863f38d9e6bae4ac1916ded5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788808dacc2c864a6b48e770dc2a26299582153d863f38d9e6bae4ac1916ded5"}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788808dacc2c864a6b48e770dc2a26299582153d863f38d9e6bae4ac1916ded5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["788808dacc2c864a6b48e770dc2a26299582153d863f38d9e6bae4ac1916ded5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788808dacc2c864a6b48e770dc2a26299582153d863f38d9e6bae4ac1916ded5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788808dacc2c864a6b48e770dc2a26299582153d863f38d9e6bae4ac1916ded5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26"}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788808dacc2c864a6b48e770dc2a26299582153d863f38d9e6bae4ac1916ded5"}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2"}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2"}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004"}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T17:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2"}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5"}
{"level":"info","ts":"2026-07-02T17:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004"}
{"level":"info","ts":"2026-07-02T17:37:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d88ba4e7-37b9-4994-a444-ab19297d10fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37128","PortSpecifier":{"PortValue":37128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d88ba4e7-37b9-4994-a444-ab19297d10fc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:37:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d88ba4e7-37b9-4994-a444-ab19297d10fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37128","PortSpecifier":{"PortValue":37128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013828,"nanos":959001165},"http":{"id":"d88ba4e7-37b9-4994-a444-ab19297d10fc","method":"POST","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d88ba4e7-37b9-4994-a444-ab19297d10fc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:37:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d88ba4e7-37b9-4994-a444-ab19297d10fc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:37:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d88ba4e7-37b9-4994-a444-ab19297d10fc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d88ba4e7-37b9-4994-a444-ab19297d10fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d88ba4e7-37b9-4994-a444-ab19297d10fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d88ba4e7-37b9-4994-a444-ab19297d10fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d88ba4e7-37b9-4994-a444-ab19297d10fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:37:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d88ba4e7-37b9-4994-a444-ab19297d10fc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:37:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d88ba4e7-37b9-4994-a444-ab19297d10fc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T17:37:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d88ba4e7-37b9-4994-a444-ab19297d10fc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:37:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d88ba4e7-37b9-4994-a444-ab19297d10fc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3700f87-6f79-419e-a33c-51b4bd67e6ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55230","PortSpecifier":{"PortValue":55230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3700f87-6f79-419e-a33c-51b4bd67e6ac","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3700f87-6f79-419e-a33c-51b4bd67e6ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55230","PortSpecifier":{"PortValue":55230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013829,"nanos":2355144},"http":{"id":"e3700f87-6f79-419e-a33c-51b4bd67e6ac","method":"POST","headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e3700f87-6f79-419e-a33c-51b4bd67e6ac","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3700f87-6f79-419e-a33c-51b4bd67e6ac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3700f87-6f79-419e-a33c-51b4bd67e6ac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3700f87-6f79-419e-a33c-51b4bd67e6ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3700f87-6f79-419e-a33c-51b4bd67e6ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3700f87-6f79-419e-a33c-51b4bd67e6ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4421aa/rate-test-model-4421aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3700f87-6f79-419e-a33c-51b4bd67e6ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3700f87-6f79-419e-a33c-51b4bd67e6ac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3700f87-6f79-419e-a33c-51b4bd67e6ac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3700f87-6f79-419e-a33c-51b4bd67e6ac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3700f87-6f79-419e-a33c-51b4bd67e6ac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9356f820-c3b0-4651-bf99-d6f19a450866","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37130","PortSpecifier":{"PortValue":37130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9356f820-c3b0-4651-bf99-d6f19a450866","method":"POST","path":"/ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac/v1/completions","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9356f820-c3b0-4651-bf99-d6f19a450866","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37130","PortSpecifier":{"PortValue":37130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013829,"nanos":46425712},"http":{"id":"9356f820-c3b0-4651-bf99-d6f19a450866","method":"POST","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9356f820-c3b0-4651-bf99-d6f19a450866","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Tfj7ypTJ175Zntva_A0UBGafkMcH6IhD5PSIL7KFcocwTUGGqaynSYLAqLO2"}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9356f820-c3b0-4651-bf99-d6f19a450866","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Tfj7ypTJ175Zntva_A0UBGafkMcH6IhD5PSIL7KFcocwTUGGqaynSYLAqLO2\"}"}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9356f820-c3b0-4651-bf99-d6f19a450866","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5ae0bfcd-6787-41f3-a394-4268eb862fed","keyName":"e2e-rate-a-1323fe","subscription":"e2e-rate-iso-a-1323fe","tenant":"e2e-shared-a-a0a2ac","userId":"5ae0bfcd-6787-41f3-a394-4268eb862fed","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9356f820-c3b0-4651-bf99-d6f19a450866","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac\",\"requestedSubscription\":\"e2e-rate-iso-a-1323fe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9356f820-c3b0-4651-bf99-d6f19a450866","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a0a2ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1323fe","namespace":"ai-tenant-e2e-shared-a-a0a2ac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9356f820-c3b0-4651-bf99-d6f19a450866","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9356f820-c3b0-4651-bf99-d6f19a450866","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9356f820-c3b0-4651-bf99-d6f19a450866","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9356f820-c3b0-4651-bf99-d6f19a450866","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9356f820-c3b0-4651-bf99-d6f19a450866","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9356f820-c3b0-4651-bf99-d6f19a450866","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1323fe"}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9356f820-c3b0-4651-bf99-d6f19a450866","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9356f820-c3b0-4651-bf99-d6f19a450866","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9356f820-c3b0-4651-bf99-d6f19a450866","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5ae0bfcd-6787-41f3-a394-4268eb862fed","keyName":"e2e-rate-a-1323fe","selected_subscription":"e2e-rate-iso-a-1323fe","selected_subscription_key":"ai-tenant-e2e-shared-a-a0a2ac/e2e-rate-iso-a-1323fe@ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a0a2ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1323fe","namespace":"ai-tenant-e2e-shared-a-a0a2ac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9356f820-c3b0-4651-bf99-d6f19a450866","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:37:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9356f820-c3b0-4651-bf99-d6f19a450866","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:37:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b25027b-0e98-481e-91b7-ee1ad084b4da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45506","PortSpecifier":{"PortValue":45506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b25027b-0e98-481e-91b7-ee1ad084b4da","method":"POST","path":"/ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac/v1/completions","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:37:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b25027b-0e98-481e-91b7-ee1ad084b4da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45506","PortSpecifier":{"PortValue":45506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013830,"nanos":133725423},"http":{"id":"5b25027b-0e98-481e-91b7-ee1ad084b4da","method":"POST","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b25027b-0e98-481e-91b7-ee1ad084b4da","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Tfj7ypTJ175Zntva_A0UBGafkMcH6IhD5PSIL7KFcocwTUGGqaynSYLAqLO2"}
{"level":"debug","ts":"2026-07-02T17:37:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b25027b-0e98-481e-91b7-ee1ad084b4da","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Tfj7ypTJ175Zntva_A0UBGafkMcH6IhD5PSIL7KFcocwTUGGqaynSYLAqLO2\"}"}
{"level":"debug","ts":"2026-07-02T17:37:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b25027b-0e98-481e-91b7-ee1ad084b4da","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5ae0bfcd-6787-41f3-a394-4268eb862fed","keyName":"e2e-rate-a-1323fe","subscription":"e2e-rate-iso-a-1323fe","tenant":"e2e-shared-a-a0a2ac","userId":"5ae0bfcd-6787-41f3-a394-4268eb862fed","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T17:37:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b25027b-0e98-481e-91b7-ee1ad084b4da","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac\",\"requestedSubscription\":\"e2e-rate-iso-a-1323fe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T17:37:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b25027b-0e98-481e-91b7-ee1ad084b4da","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a0a2ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1323fe","namespace":"ai-tenant-e2e-shared-a-a0a2ac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T17:37:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b25027b-0e98-481e-91b7-ee1ad084b4da","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b25027b-0e98-481e-91b7-ee1ad084b4da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b25027b-0e98-481e-91b7-ee1ad084b4da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b25027b-0e98-481e-91b7-ee1ad084b4da","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b25027b-0e98-481e-91b7-ee1ad084b4da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b25027b-0e98-481e-91b7-ee1ad084b4da","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T17:37:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b25027b-0e98-481e-91b7-ee1ad084b4da","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:37:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b25027b-0e98-481e-91b7-ee1ad084b4da","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1323fe"}
{"level":"debug","ts":"2026-07-02T17:37:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b25027b-0e98-481e-91b7-ee1ad084b4da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5ae0bfcd-6787-41f3-a394-4268eb862fed","keyName":"e2e-rate-a-1323fe","selected_subscription":"e2e-rate-iso-a-1323fe","selected_subscription_key":"ai-tenant-e2e-shared-a-a0a2ac/e2e-rate-iso-a-1323fe@ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a0a2ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1323fe","namespace":"ai-tenant-e2e-shared-a-a0a2ac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T17:37:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b25027b-0e98-481e-91b7-ee1ad084b4da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:37:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b25027b-0e98-481e-91b7-ee1ad084b4da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:37:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c65fdc90-db97-4b39-94ea-f6e1d1e3af77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45510","PortSpecifier":{"PortValue":45510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c65fdc90-db97-4b39-94ea-f6e1d1e3af77","method":"POST","path":"/ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac/v1/completions","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:37:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c65fdc90-db97-4b39-94ea-f6e1d1e3af77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45510","PortSpecifier":{"PortValue":45510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013831,"nanos":184316115},"http":{"id":"c65fdc90-db97-4b39-94ea-f6e1d1e3af77","method":"POST","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c65fdc90-db97-4b39-94ea-f6e1d1e3af77","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Tfj7ypTJ175Zntva_A0UBGafkMcH6IhD5PSIL7KFcocwTUGGqaynSYLAqLO2"}
{"level":"debug","ts":"2026-07-02T17:37:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c65fdc90-db97-4b39-94ea-f6e1d1e3af77","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Tfj7ypTJ175Zntva_A0UBGafkMcH6IhD5PSIL7KFcocwTUGGqaynSYLAqLO2\"}"}
{"level":"debug","ts":"2026-07-02T17:37:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c65fdc90-db97-4b39-94ea-f6e1d1e3af77","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5ae0bfcd-6787-41f3-a394-4268eb862fed","keyName":"e2e-rate-a-1323fe","subscription":"e2e-rate-iso-a-1323fe","tenant":"e2e-shared-a-a0a2ac","userId":"5ae0bfcd-6787-41f3-a394-4268eb862fed","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T17:37:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c65fdc90-db97-4b39-94ea-f6e1d1e3af77","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac\",\"requestedSubscription\":\"e2e-rate-iso-a-1323fe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T17:37:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c65fdc90-db97-4b39-94ea-f6e1d1e3af77","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a0a2ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1323fe","namespace":"ai-tenant-e2e-shared-a-a0a2ac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T17:37:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c65fdc90-db97-4b39-94ea-f6e1d1e3af77","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c65fdc90-db97-4b39-94ea-f6e1d1e3af77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c65fdc90-db97-4b39-94ea-f6e1d1e3af77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c65fdc90-db97-4b39-94ea-f6e1d1e3af77","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c65fdc90-db97-4b39-94ea-f6e1d1e3af77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c65fdc90-db97-4b39-94ea-f6e1d1e3af77","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:37:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c65fdc90-db97-4b39-94ea-f6e1d1e3af77","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1323fe"}
{"level":"debug","ts":"2026-07-02T17:37:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c65fdc90-db97-4b39-94ea-f6e1d1e3af77","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T17:37:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c65fdc90-db97-4b39-94ea-f6e1d1e3af77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5ae0bfcd-6787-41f3-a394-4268eb862fed","keyName":"e2e-rate-a-1323fe","selected_subscription":"e2e-rate-iso-a-1323fe","selected_subscription_key":"ai-tenant-e2e-shared-a-a0a2ac/e2e-rate-iso-a-1323fe@ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a0a2ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1323fe","namespace":"ai-tenant-e2e-shared-a-a0a2ac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T17:37:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c65fdc90-db97-4b39-94ea-f6e1d1e3af77","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:37:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c65fdc90-db97-4b39-94ea-f6e1d1e3af77","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a4bd43c-fb3b-4f3f-a87b-31e241965799","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58746","PortSpecifier":{"PortValue":58746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a4bd43c-fb3b-4f3f-a87b-31e241965799","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a4bd43c-fb3b-4f3f-a87b-31e241965799","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58746","PortSpecifier":{"PortValue":58746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013842,"nanos":174348619},"http":{"id":"6a4bd43c-fb3b-4f3f-a87b-31e241965799","method":"POST","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6a4bd43c-fb3b-4f3f-a87b-31e241965799","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a4bd43c-fb3b-4f3f-a87b-31e241965799","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a4bd43c-fb3b-4f3f-a87b-31e241965799","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a4bd43c-fb3b-4f3f-a87b-31e241965799","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a4bd43c-fb3b-4f3f-a87b-31e241965799","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a4bd43c-fb3b-4f3f-a87b-31e241965799","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a4bd43c-fb3b-4f3f-a87b-31e241965799","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a4bd43c-fb3b-4f3f-a87b-31e241965799","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a4bd43c-fb3b-4f3f-a87b-31e241965799","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a4bd43c-fb3b-4f3f-a87b-31e241965799","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a4bd43c-fb3b-4f3f-a87b-31e241965799","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc9a72c0-e4d5-4ffe-9585-390a4345a89c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53708","PortSpecifier":{"PortValue":53708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc9a72c0-e4d5-4ffe-9585-390a4345a89c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc9a72c0-e4d5-4ffe-9585-390a4345a89c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53708","PortSpecifier":{"PortValue":53708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013842,"nanos":213678364},"http":{"id":"dc9a72c0-e4d5-4ffe-9585-390a4345a89c","method":"POST","headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dc9a72c0-e4d5-4ffe-9585-390a4345a89c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc9a72c0-e4d5-4ffe-9585-390a4345a89c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"]}}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc9a72c0-e4d5-4ffe-9585-390a4345a89c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d933c6799a17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd7f2da1-640f-4ab2-a669-db52c69649e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd5964ca-1573-44ab-81e5-ca9b03f3b7ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc9a72c0-e4d5-4ffe-9585-390a4345a89c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc9a72c0-e4d5-4ffe-9585-390a4345a89c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc9a72c0-e4d5-4ffe-9585-390a4345a89c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4421aa/rate-test-model-4421aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dc9a72c0-e4d5-4ffe-9585-390a4345a89c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc9a72c0-e4d5-4ffe-9585-390a4345a89c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc9a72c0-e4d5-4ffe-9585-390a4345a89c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc9a72c0-e4d5-4ffe-9585-390a4345a89c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc9a72c0-e4d5-4ffe-9585-390a4345a89c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e79f00f7-0e7a-4834-ae7b-a1e8859ac74a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58754","PortSpecifier":{"PortValue":58754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e79f00f7-0e7a-4834-ae7b-a1e8859ac74a","method":"POST","path":"/ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac/v1/completions","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e79f00f7-0e7a-4834-ae7b-a1e8859ac74a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58754","PortSpecifier":{"PortValue":58754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013842,"nanos":257078248},"http":{"id":"e79f00f7-0e7a-4834-ae7b-a1e8859ac74a","method":"POST","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e79f00f7-0e7a-4834-ae7b-a1e8859ac74a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Yp1OVQbCGAmvzc3P_nZ3clNoaMKssK7j3ngEkiKqwxVh2dStHVoGLccXkDTV"}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e79f00f7-0e7a-4834-ae7b-a1e8859ac74a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Yp1OVQbCGAmvzc3P_nZ3clNoaMKssK7j3ngEkiKqwxVh2dStHVoGLccXkDTV\"}"}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e79f00f7-0e7a-4834-ae7b-a1e8859ac74a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1012bdb6-bd18-4f8b-b6ea-32896d460fcc","keyName":"e2e-rate-a-fe2847","subscription":"e2e-rate-iso-a-fe2847","tenant":"e2e-shared-a-a0a2ac","userId":"1012bdb6-bd18-4f8b-b6ea-32896d460fcc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e79f00f7-0e7a-4834-ae7b-a1e8859ac74a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac\",\"requestedSubscription\":\"e2e-rate-iso-a-fe2847\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e79f00f7-0e7a-4834-ae7b-a1e8859ac74a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a0a2ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fe2847","namespace":"ai-tenant-e2e-shared-a-a0a2ac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e79f00f7-0e7a-4834-ae7b-a1e8859ac74a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e79f00f7-0e7a-4834-ae7b-a1e8859ac74a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e79f00f7-0e7a-4834-ae7b-a1e8859ac74a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e79f00f7-0e7a-4834-ae7b-a1e8859ac74a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e79f00f7-0e7a-4834-ae7b-a1e8859ac74a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e79f00f7-0e7a-4834-ae7b-a1e8859ac74a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fe2847"}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e79f00f7-0e7a-4834-ae7b-a1e8859ac74a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e79f00f7-0e7a-4834-ae7b-a1e8859ac74a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e79f00f7-0e7a-4834-ae7b-a1e8859ac74a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1012bdb6-bd18-4f8b-b6ea-32896d460fcc","keyName":"e2e-rate-a-fe2847","selected_subscription":"e2e-rate-iso-a-fe2847","selected_subscription_key":"ai-tenant-e2e-shared-a-a0a2ac/e2e-rate-iso-a-fe2847@ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a0a2ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fe2847","namespace":"ai-tenant-e2e-shared-a-a0a2ac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e79f00f7-0e7a-4834-ae7b-a1e8859ac74a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e79f00f7-0e7a-4834-ae7b-a1e8859ac74a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:37:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb0087cf-ba70-4889-8229-01f10ef4419f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58768","PortSpecifier":{"PortValue":58768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb0087cf-ba70-4889-8229-01f10ef4419f","method":"POST","path":"/ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac/v1/completions","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:37:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb0087cf-ba70-4889-8229-01f10ef4419f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58768","PortSpecifier":{"PortValue":58768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013843,"nanos":296033453},"http":{"id":"fb0087cf-ba70-4889-8229-01f10ef4419f","method":"POST","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb0087cf-ba70-4889-8229-01f10ef4419f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Yp1OVQbCGAmvzc3P_nZ3clNoaMKssK7j3ngEkiKqwxVh2dStHVoGLccXkDTV"}
{"level":"debug","ts":"2026-07-02T17:37:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb0087cf-ba70-4889-8229-01f10ef4419f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Yp1OVQbCGAmvzc3P_nZ3clNoaMKssK7j3ngEkiKqwxVh2dStHVoGLccXkDTV\"}"}
{"level":"debug","ts":"2026-07-02T17:37:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb0087cf-ba70-4889-8229-01f10ef4419f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1012bdb6-bd18-4f8b-b6ea-32896d460fcc","keyName":"e2e-rate-a-fe2847","subscription":"e2e-rate-iso-a-fe2847","tenant":"e2e-shared-a-a0a2ac","userId":"1012bdb6-bd18-4f8b-b6ea-32896d460fcc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T17:37:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb0087cf-ba70-4889-8229-01f10ef4419f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac\",\"requestedSubscription\":\"e2e-rate-iso-a-fe2847\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T17:37:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb0087cf-ba70-4889-8229-01f10ef4419f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a0a2ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fe2847","namespace":"ai-tenant-e2e-shared-a-a0a2ac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T17:37:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb0087cf-ba70-4889-8229-01f10ef4419f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb0087cf-ba70-4889-8229-01f10ef4419f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb0087cf-ba70-4889-8229-01f10ef4419f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb0087cf-ba70-4889-8229-01f10ef4419f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb0087cf-ba70-4889-8229-01f10ef4419f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb0087cf-ba70-4889-8229-01f10ef4419f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:37:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb0087cf-ba70-4889-8229-01f10ef4419f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T17:37:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb0087cf-ba70-4889-8229-01f10ef4419f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fe2847"}
{"level":"debug","ts":"2026-07-02T17:37:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb0087cf-ba70-4889-8229-01f10ef4419f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1012bdb6-bd18-4f8b-b6ea-32896d460fcc","keyName":"e2e-rate-a-fe2847","selected_subscription":"e2e-rate-iso-a-fe2847","selected_subscription_key":"ai-tenant-e2e-shared-a-a0a2ac/e2e-rate-iso-a-fe2847@ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a0a2ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fe2847","namespace":"ai-tenant-e2e-shared-a-a0a2ac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T17:37:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb0087cf-ba70-4889-8229-01f10ef4419f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:37:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb0087cf-ba70-4889-8229-01f10ef4419f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6f321d5-b153-4d08-943e-0fcaad804259","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58780","PortSpecifier":{"PortValue":58780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6f321d5-b153-4d08-943e-0fcaad804259","method":"POST","path":"/ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac/v1/completions","host":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6f321d5-b153-4d08-943e-0fcaad804259","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58780","PortSpecifier":{"PortValue":58780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013844,"nanos":340828592},"http":{"id":"e6f321d5-b153-4d08-943e-0fcaad804259","method":"POST","headers":{":authority":"e2e-shared-a-a0a2ac.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6f321d5-b153-4d08-943e-0fcaad804259","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Yp1OVQbCGAmvzc3P_nZ3clNoaMKssK7j3ngEkiKqwxVh2dStHVoGLccXkDTV"}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6f321d5-b153-4d08-943e-0fcaad804259","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Yp1OVQbCGAmvzc3P_nZ3clNoaMKssK7j3ngEkiKqwxVh2dStHVoGLccXkDTV\"}"}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6f321d5-b153-4d08-943e-0fcaad804259","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1012bdb6-bd18-4f8b-b6ea-32896d460fcc","keyName":"e2e-rate-a-fe2847","subscription":"e2e-rate-iso-a-fe2847","tenant":"e2e-shared-a-a0a2ac","userId":"1012bdb6-bd18-4f8b-b6ea-32896d460fcc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6f321d5-b153-4d08-943e-0fcaad804259","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac\",\"requestedSubscription\":\"e2e-rate-iso-a-fe2847\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6f321d5-b153-4d08-943e-0fcaad804259","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a0a2ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a0a2ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fe2847","namespace":"ai-tenant-e2e-shared-a-a0a2ac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6f321d5-b153-4d08-943e-0fcaad804259","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6f321d5-b153-4d08-943e-0fcaad804259","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6f321d5-b153-4d08-943e-0fcaad804259","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6f321d5-b153-4d08-943e-0fcaad804259","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6f321d5-b153-4d08-943e-0fcaad804259","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6f321d5-b153-4d08-943e-0fcaad804259","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6f321d5-b153-4d08-943e-0fcaad804259","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6f321d5-b153-4d08-943e-0fcaad804259","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fe2847"}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6f321d5-b153-4d08-943e-0fcaad804259","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1012bdb6-bd18-4f8b-b6ea-32896d460fcc","keyName":"e2e-rate-a-fe2847","selected_subscription":"e2e-rate-iso-a-fe2847","selected_subscription_key":"ai-tenant-e2e-shared-a-a0a2ac/e2e-rate-iso-a-fe2847@ai-tenant-e2e-shared-a-a0a2ac/rate-test-model-a0a2ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a0a2ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fe2847","namespace":"ai-tenant-e2e-shared-a-a0a2ac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6f321d5-b153-4d08-943e-0fcaad804259","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6f321d5-b153-4d08-943e-0fcaad804259","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca744bbc-9e15-4a95-af30-04cc5f5a5fee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53720","PortSpecifier":{"PortValue":53720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca744bbc-9e15-4a95-af30-04cc5f5a5fee","method":"POST","path":"/ai-tenant-e2e-shared-b-4421aa/rate-test-model-4421aa/v1/completions","host":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca744bbc-9e15-4a95-af30-04cc5f5a5fee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53720","PortSpecifier":{"PortValue":53720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783013844,"nanos":379286210},"http":{"id":"ca744bbc-9e15-4a95-af30-04cc5f5a5fee","method":"POST","headers":{":authority":"e2e-shared-b-4421aa.apps.fc1dafbc-2e8d-4106-b053-d933c6799a17.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-4421aa/rate-test-model-4421aa/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca744bbc-9e15-4a95-af30-04cc5f5a5fee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OkkxYUS1SUrDSLGe_l7k07f62D8990ItI1AraBAiJdqZ2GYL7l29eeDVEegs"}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca744bbc-9e15-4a95-af30-04cc5f5a5fee","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4421aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OkkxYUS1SUrDSLGe_l7k07f62D8990ItI1AraBAiJdqZ2GYL7l29eeDVEegs\"}"}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca744bbc-9e15-4a95-af30-04cc5f5a5fee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4421aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"27c96f72-0ef8-44c4-bd32-77957e600793","keyName":"e2e-rate-b-fe2847","subscription":"e2e-rate-iso-b-fe2847","tenant":"e2e-shared-b-4421aa","userId":"27c96f72-0ef8-44c4-bd32-77957e600793","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca744bbc-9e15-4a95-af30-04cc5f5a5fee","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-4421aa.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-4421aa/rate-test-model-4421aa\",\"requestedSubscription\":\"e2e-rate-iso-b-fe2847\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca744bbc-9e15-4a95-af30-04cc5f5a5fee","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4421aa.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4421aa","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-fe2847","namespace":"ai-tenant-e2e-shared-b-4421aa","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca744bbc-9e15-4a95-af30-04cc5f5a5fee","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca744bbc-9e15-4a95-af30-04cc5f5a5fee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca744bbc-9e15-4a95-af30-04cc5f5a5fee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca744bbc-9e15-4a95-af30-04cc5f5a5fee","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca744bbc-9e15-4a95-af30-04cc5f5a5fee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4421aa/rate-test-model-4421aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca744bbc-9e15-4a95-af30-04cc5f5a5fee","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca744bbc-9e15-4a95-af30-04cc5f5a5fee","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca744bbc-9e15-4a95-af30-04cc5f5a5fee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-fe2847"}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca744bbc-9e15-4a95-af30-04cc5f5a5fee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"27c96f72-0ef8-44c4-bd32-77957e600793","keyName":"e2e-rate-b-fe2847","selected_subscription":"e2e-rate-iso-b-fe2847","selected_subscription_key":"ai-tenant-e2e-shared-b-4421aa/e2e-rate-iso-b-fe2847@ai-tenant-e2e-shared-b-4421aa/rate-test-model-4421aa","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4421aa","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-fe2847","namespace":"ai-tenant-e2e-shared-b-4421aa","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca744bbc-9e15-4a95-af30-04cc5f5a5fee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T17:37:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca744bbc-9e15-4a95-af30-04cc5f5a5fee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T17:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a05df2bb5b2e1179cf98b5a874ef4f1c24538cdac9b4853e7119ff1bfc95004"}
{"level":"info","ts":"2026-07-02T17:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7c557131798960b3a82c340b63f1cb42eaae6667995f650d976a4ed5174186d"}
{"level":"info","ts":"2026-07-02T17:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd0ebb99effd126b0a1308e371faa046b704b9b97736ed96995a0a9ac740f9c1"}
{"level":"info","ts":"2026-07-02T17:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/788808dacc2c864a6b48e770dc2a26299582153d863f38d9e6bae4ac1916ded5"}
{"level":"info","ts":"2026-07-02T17:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c6d2dd808d6873b63a1ae3bddade43e7544fa99394d2d4895ab38642d7925a7"}
{"level":"info","ts":"2026-07-02T17:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6347bca2603f1825128f439d6ab259028c9530339aeb2d2f56f1457bbbd062ae"}
{"level":"info","ts":"2026-07-02T17:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/917793a7faafd1a71fad84846b6172f558b47b004cc3efec442433c294db6b3b"}
{"level":"info","ts":"2026-07-02T17:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5493013ff3c00aa6def60fece7795a42f4c009e4e91a08e926c30188543b0e4e"}
{"level":"info","ts":"2026-07-02T17:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ff16de86cfdf0d2c71fae6af4079bd5abcb951872abc873d606e2225a5532aa"}
{"level":"info","ts":"2026-07-02T17:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c7f0f7c0362a9ac78d925dec3be07252f1cd3378a9e2f57a13e70a4f80485db"}
{"level":"info","ts":"2026-07-02T17:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa36d24b049faf3294f6c16b09b404bf2bf48ab65d39b7f5eb92a489770132e4"}
{"level":"info","ts":"2026-07-02T17:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5de7c73e93bdde1ec5edee2cda848a1d5ca1c88aff9a38034182b46b8354d21"}
{"level":"info","ts":"2026-07-02T17:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d5c2942956b4a8719c74bb1a693fcc220af99029d20c767cfbc9991ba1a0ca3"}
{"level":"info","ts":"2026-07-02T17:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c0936ffefc7484841157cb5128ece5ec4d594e417e4ea7c1e8817fa4c771896"}
{"level":"info","ts":"2026-07-02T17:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d816409e0341dc1d4662c6225ee48a8bccc6db8b66b63090b87b96d80a22b1f5"}
{"level":"info","ts":"2026-07-02T17:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51ac60f813ba41844c1e8ca6b0d29f92505268bd6a2e2a4150406249f4177d3f"}
{"level":"info","ts":"2026-07-02T17:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa2abe3fe2bd63f1b1771c580a21da502c0e6edf37008aa5805152aefac3dff5"}
{"level":"info","ts":"2026-07-02T17:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b25fa5c18e9ffa81602439d19d879e77f5274c35ab53bb12018c5d89ca76f349"}
{"level":"info","ts":"2026-07-02T17:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c007bd6c5402eba2247da2570676cb180dde115661f8311e4586899dc21ed26"}
{"level":"info","ts":"2026-07-02T17:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2d9cf33afd065300167254193423f2c6711af9b59ea4eca47f598cef71817f2"}